Phase2-Enumeration¶

Synopsis¶

Phase 2 helper for AD Permissions Analyzer: paged enumeration of every object in a naming context together with its raw nTSecurityDescriptor.

Description¶

Implements §5 Phase 2 from docs/AD-Permissions-Analyzer-Plan.md. Builds on Read-LdapEntry (Phase1-DiscoveryAndMaps.ps1) so the page loop and binary-attribute extraction are shared; this file adds the SecurityDescriptorFlagControl(OWNER | DACL) and the batch-yield contract Phase 3 will consume.

Inputs¶

None.

Outputs¶

None.