MATCH p=(n:Base)
WHERE (n:User OR n:Computer or n:CertTemplate)
AND n.whencreated > (datetime().epochseconds - (DAYS_AFTER * 86400))
RETURN p
LIMIT 100
s/o @kaydaskalakis.bsky.social
🧵: 3/3
MATCH p=(n:Base)
WHERE (n:User OR n:Computer or n:CertTemplate)
AND n.whencreated > (datetime().epochseconds - (DAYS_AFTER * 86400))
RETURN p
LIMIT 100
s/o @kaydaskalakis.bsky.social
🧵: 3/3
WHERE NOT c.haslaps AND coalesce(c.system_tags, "")
CONTAINS "admin_tier_0" AND NOT c.distinguishedname
CONTAINS "DOMAIN CONTROLLERS"
RETURN c
s/o @kaydaskalakis.bsky.social
🧵: 2/2
WHERE NOT c.haslaps AND coalesce(c.system_tags, "")
CONTAINS "admin_tier_0" AND NOT c.distinguishedname
CONTAINS "DOMAIN CONTROLLERS"
RETURN c
s/o @kaydaskalakis.bsky.social
🧵: 2/2