Getting Data In

Is there a parser that will convert Windows SDDL or ACE format strings into human readable content?

javiergn
SplunkTrust
SplunkTrust

Hi,

Is anyone aware of an existing parser that will convert windows SDDL format or ACE format strings into human readable content?

as an exanples piece of SDDL
D:AI(A;OICIID;FA;;;BU)(A;ID;FA;;;BA)

Thanks

Tags (1)
0 Karma

nadeemka2000
New Member

Hi,

Download sddlparse tool from http://blogs.microsoft.co.il/files/folders/guyt/entry70399.aspx

Create .vbs file with below code:

strSDDLParse = "C:\Tools\SDDLParse.exe"
strSDDL = "D:PAI(A;OICI;0x1201bf;;;S-1-5-21-1216582894-834684500-1334827815-316441)(A;OICIIO;FA;;;CO)(A;OICI;FA;;;SY)(A;OICI;FA;;;S-1-5-21-1216582894-834684500-1334827815-458061)"
Set objShell = CreateObject("WScript.Shell")
Set objExec = objShell.Exec(strSDDLParse & " " & strSDDL)
While objExec.Status = 0
WScript.Sleep 100
Wend
WScript.Echo objExec.StdOut.ReadAll

Edit the code accordingly and specify the SDDL string to convert

Thanks,

Nadeem

0 Karma
.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!