Getting Data In

Is there a parser that will convert Windows SDDL or ACE format strings into human readable content?

javiergn
Super Champion

Hi,

Is anyone aware of an existing parser that will convert windows SDDL format or ACE format strings into human readable content?

as an exanples piece of SDDL
D:AI(A;OICIID;FA;;;BU)(A;ID;FA;;;BA)

Thanks

Tags (1)
0 Karma

nadeemka2000
New Member

Hi,

Download sddlparse tool from http://blogs.microsoft.co.il/files/folders/guyt/entry70399.aspx

Create .vbs file with below code:

strSDDLParse = "C:\Tools\SDDLParse.exe"
strSDDL = "D:PAI(A;OICI;0x1201bf;;;S-1-5-21-1216582894-834684500-1334827815-316441)(A;OICIIO;FA;;;CO)(A;OICI;FA;;;SY)(A;OICI;FA;;;S-1-5-21-1216582894-834684500-1334827815-458061)"
Set objShell = CreateObject("WScript.Shell")
Set objExec = objShell.Exec(strSDDLParse & " " & strSDDL)
While objExec.Status = 0
WScript.Sleep 100
Wend
WScript.Echo objExec.StdOut.ReadAll

Edit the code accordingly and specify the SDDL string to convert

Thanks,

Nadeem

0 Karma
Get Updates on the Splunk Community!

AI for AppInspect

We’re excited to announce two new updates to AppInspect designed to save you time and make the app approval ...

App Platform's 2025 Year in Review: A Year of Innovation, Growth, and Community

As we step into 2026, it’s the perfect moment to reflect on what an extraordinary year 2025 was for the Splunk ...

Operationalizing Entity Risk Score with Enterprise Security 8.3+

Overview Enterprise Security 8.3 introduces a powerful new feature called “Entity Risk Scoring” (ERS) for ...