feat: collect unresolved published cert templates

SpecterOps · Apr 29, 2024 · 5587b95 · 5587b95
1 parent e2fc5a8
commit 5587b95
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/src/Runtime/ObjectProcessors.cs b/src/Runtime/ObjectProcessors.cs
@@ -619,8 +619,10 @@ private async Task<EnterpriseCA> ProcessEnterpriseCA(ISearchResultEntry entry, R
                 var props = LDAPPropertyProcessor.ReadEnterpriseCAProperties(entry);
                 ret.Properties.Merge(props);
 
-                // Enabled cert templates
-                ret.EnabledCertTemplates = _certAbuseProcessor.ProcessCertTemplates(entry.GetArrayProperty(LDAPProperties.CertificateTemplates), resolvedSearchResult.Domain).ToArray();
+                // Enabled/published cert templates
+                (IEnumerable<TypedPrincipal> resolvedTemplates, IEnumerable<string> unresolvedTemplates) = _certAbuseProcessor.ProcessCertTemplates(entry.GetArrayProperty(LDAPProperties.CertificateTemplates), resolvedSearchResult.Domain);
+                ret.EnabledCertTemplates = resolvedTemplates.ToArray();
+                ret.Properties.Add("unresolvedpublishedtemplates", unresolvedTemplates.ToArray());
             }
 
             if ((_methods & ResolvedCollectionMethod.Container) != 0 || (_methods & ResolvedCollectionMethod.CertServices) != 0)