Skip to content

Commit

Permalink
Merge pull request SpecterOps#40 from Beercow/master
Browse files Browse the repository at this point in the history
Update PrebuiltQueries.json
  • Loading branch information
rvazarkar authored Aug 24, 2016
2 parents d8c9886 + 74c74ce commit ff3025b
Showing 1 changed file with 13 additions and 1 deletion.
14 changes: 13 additions & 1 deletion src/components/SearchContainer/Tabs/PrebuiltQueries.json
Original file line number Diff line number Diff line change
Expand Up @@ -30,6 +30,18 @@
"query": "MATCH (n:User),(m:Computer), (n)<-[r:HasSession]-(m) WHERE NOT n.name STARTS WITH 'ANONYMOUS LOGON' AND NOT n.name='' WITH m, count(r) as rel_count order by rel_count desc LIMIT 1 MATCH (m)-[r:HasSession]->(n) RETURN n,r,m",
"allowCollapse": false
},
{
"name": "Find User with Most Local Admin Rights",
"requireNodeSelect": false,
"query": "MATCH (n:User),(m:Computer), (n)-[r:AdminTo]->(m) WHERE NOT n.name STARTS WITH 'ANONYMOUS LOGON' AND NOT n.name='' WITH n, count(r) as rel_count order by rel_count desc LIMIT 1 MATCH (m)<-[r:AdminTo]-(n) RETURN n,r,m",
"allowCollapse": true
},
{
"name": "Find Computer with Most Admins",
"requireNodeSelect": false,
"query": "MATCH (n:User),(m:Computer), (n)-[r:AdminTo]->(m) WHERE NOT n.name STARTS WITH 'ANONYMOUS LOGON' AND NOT n.name='' WITH m, count(r) as rel_count order by rel_count desc LIMIT 1 MATCH (m)<-[r:AdminTo]-(n) RETURN n,r,m",
"allowCollapse": false
},
{
"name" : "Users with Foreign Domain Group Membership",
"requireNodeSelect": true,
Expand Down Expand Up @@ -61,4 +73,4 @@
"allowCollapse": false
}
]
}
}

0 comments on commit ff3025b

Please sign in to comment.