Easily RETURN computers, users, and certificate templates created in the last X days where X can match anything you want. In this case we are looking for objects created in the last 365 days.
🧵: 1/3
Easily RETURN computers, users, and certificate templates created in the last X days where X can match anything you want. In this case we are looking for objects created in the last 365 days.
🧵: 1/3
MATCH p=(n:Base)
WHERE (n:User OR n:Computer or n:CertTemplate)
AND n.whencreated > (datetime().epochseconds - (DAYS_AFTER * 86400))
RETURN p
LIMIT 100
s/o @kaydaskalakis.bsky.social
🧵: 3/3
MATCH p=(n:Base)
WHERE (n:User OR n:Computer or n:CertTemplate)
AND n.whencreated > (datetime().epochseconds - (DAYS_AFTER * 86400))
RETURN p
LIMIT 100
s/o @kaydaskalakis.bsky.social
🧵: 3/3
WHERE NOT c.haslaps AND coalesce(c.system_tags, "")
CONTAINS "admin_tier_0" AND NOT c.distinguishedname
CONTAINS "DOMAIN CONTROLLERS"
RETURN c
s/o @kaydaskalakis.bsky.social
🧵: 2/2
WHERE NOT c.haslaps AND coalesce(c.system_tags, "")
CONTAINS "admin_tier_0" AND NOT c.distinguishedname
CONTAINS "DOMAIN CONTROLLERS"
RETURN c
s/o @kaydaskalakis.bsky.social
🧵: 2/2
Let's meet!
➡️ blackhat.com/eu-24/
Let's meet!