Merge pull request #60 from PlumHound/Relkci-patch-1

Update default.tasks
PlumHound · Apr 5, 2024 · 195db41 · 195db41
2 parents 50f0aaf + 375121e
commit 195db41
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/tasks/default.tasks b/tasks/default.tasks
@@ -62,7 +62,9 @@
 ["Computers Admin of Computers","HTMLCSV","Computers_admin_computers","MATCH p=(m:Computer {enabled: True})-[r1:MemberOf*0..]->(g)-[r2:AdminTo*1..]->(n:Computer) WHERE n <> m RETURN m.name as Computer, n.name as TargetComputer"]
 ["Computers Admin of Computers Count","HTML","Computers_admin_computers_count.html","MATCH p=(m:Computer {enabled: True})-[r1:MemberOf*0..]->(g)-[r2:AdminTo*1..]->(n:Computer) WHERE n <> m RETURN m.name as Computer, COUNT(n) as TargetComputerCount"]
 ["Computers with Descriptions","HTMLCSV","Computers_WithDescriptions","MATCH (c:Computer) WHERE c.description IS NOT NULL RETURN c.name as Computer,c.description as Description"]
-["Computers Vulnerable to Local Admin Enumeration","HTMLCSV","Computers_With_More_Than1_Local_Admin","MATCH p=()-[:AdminTo]->(n:Computer) RETURN n.name as Host, n.operatingsystem as OS"]
+["Local Admin Users To Computers","HTMLCSV","LocalAdmin_Users","MATCH p=(s:User)-[:AdminTo]->(n:Computer) RETURN s.name as name,  n.name as Host, n.operatingsystem as OS"]
+["Local Admin Groups To Computers","HTMLCSV","LocalAdmin_Groups","MATCH p=(s:Group)-[:AdminTo]->(n:Computer) RETURN s.name as name,  n.name as Host, n.operatingsystem as OS"]
+["Local Admin Computers To Computers","HTMLCSV","LocalAdmin_Computers","MATCH p=(s:Computer)-[:AdminTo]->(n:Computer) RETURN s.name as name,  n.name as Host, n.operatingsystem as OS"]
 ["Operating Systems Unsupported", "HTMLCSV", "OS_Unsupported", "MATCH (c:Computer) WHERE c.operatingsystem =~ '.*(2000|2003|2008|2012|xp|vista|7|me).*' RETURN c.name as Computer, c.operatingsystem as UnsupportedOS, c.enabled as Enabled, toString(datetime({epochSeconds: ToInteger(coalesce(c.pwdlastset,0))})) as PWDLastSet, toString(datetime({epochSeconds: ToInteger(coalesce(c.lastlogontimestamp,0))})) as LastLogonTimeStamp" ]
 ["Operating Systems Unsupported Count", "HTMLCSV", "OS_Unsupported_Count", "MATCH (c:Computer) WHERE c.operatingsystem =~ '.*(2000|2003|2008|2012|xp|vista|7|me).*' RETURN COUNT(DISTINCT(c.name)) as Computers, c.operatingsystem as UnsupportedOS, c.enabled as Enabled ORDER BY Enabled DESC, Computers DESC" ]
 ["Operating Systems Count", "HTMLCSV", "OS_Count", "MATCH (c:Computer) RETURN c.operatingsystem aS OS, count(*) as Computers, c.enabled as Enabled ORDER BY Enabled DESC, Computers DESC" ]