SID History/Risky SPN Scan Duration about zbang HOT 5 CLOSED

Issue was partially resolved and I was able to scan specific forests by modifying some of the code however we now have a new issue where we are getting the system out of memory exception.

from zbang.

Hey,

Thank you for the feedback, we currently working on a fix for it.
In the meanwhile you may use the scripts which have the capability you need, see below.

RiskySPNn -
https://github.com/cyberark/zBang/blob/master/SourceCode/src/Graphviz4Net.WPF.Example/bin/Debug/Get-PotentiallyCrackableAccounts.ps1

SIDHistory - https://github.com/cyberark/zBang/blob/master/SourceCode/src/Graphviz4Net.WPF.Example/bin/Debug/SIDHistory_Scanner.ps1

from zbang.

Hello,

Thanks for getting back to me on this issue we are facing, I have reviewed the links provided to the scripts and it would appear we would still have the same issue.

After an extended duration the RiskySPNs scan completed so it is no longer an issue with the code rather a time related matter.

But for the SIDHistory the code that I had to modify to point to the specific domain forest was line 110 and 127. I would have to do that also with the script provided above. I believe it to be an issue with a large domain forest and running out of memory at this stage or the code cannot handle a large domain when searching for the SIDHistory values.

from zbang.

Hey,

What is the size of the domain that you tested with the SIDHistory script that went out of memory?

Also, I would like to inform you that a new release that integrates RiskeySPN and SIDHistory domain selection with the zBang GUI is in its final stage, we have some testing to do before we release it.

from zbang.

The SIDHistory script has been modified - Improvement in memory utilization and algorithm logic.

from zbang.