> For the complete documentation index, see [llms.txt](https://docs.forestall.io/forestall/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/forestall/search-and-reports/active-directory-entities/script.md).

# Script

| Field            | Type        | Possible Operators                                             | Description                                                                                                                                                                                                                                                                                     |
| ---------------- | ----------- | -------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Guid             | TEXT        | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | A unique identifier that is a combination of GUID of selected `Scan` and Active Directory `ObjectGUID` of the object.                                                                                                                                                                           |
| FSName           | TEXT        | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | A special unique identifier that is a combination of the `Name of the object` and the `Fully Qualified Domain Name of the Domain`                                                                                                                                                               |
| Name             | TEXT        | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Name of the specified object. (**Ldap Display Name**: ou)                                                                                                                                                                                                                                       |
| Path             | TEXT        | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The full location where the script file was found during the scan.                                                                                                                                                                                                                              |
| GpoType          | TEXT        | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Indicates the group policy type the script belongs to. (Machine, User)                                                                                                                                                                                                                          |
| IsRead           | BOOLEAN     | N/A (toggle)                                                   | Indicates whether the file is readable by Everyone.                                                                                                                                                                                                                                             |
| CommandLine      | TEXT        | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | The CommandLine property defines the full command line used to run the script, including the script’s file path and parameters. It is read from the GPO configuration files (scripts.ini or psscripts.ini), which store the script settings for Startup, Shutdown, Logon, and Logoff processes. |
| Parameters       | TEXT        | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Indicates the command line parameters that are required to run the script.                                                                                                                                                                                                                      |
| CanEveryoneWrite | BOOLEAN     | N/A (toggle)                                                   | Indicates whether the file is writable by Everyone.                                                                                                                                                                                                                                             |
| ExposurePoint    | NUMBER      | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | **ExposurePoint**: A numerical value indicating the level of risk or exposure.                                                                                                                                                                                                                  |
| AceAuditState    | MULTI\_LIST | IN                                                             | SACL audit coverage of the object's permissions (ACEs): `Full` when every ACE is covered by a success audit rule, `Partial` when some are, `None` when none are. Set only when the scan runs the permission (over-privilege) analysis. Values: None, Partial, Full.                             |
| Tier             | NUMBER      | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | Tier level Forestall assigned to the object: `0` (Tier 0), `1` (Tier 1) or `2` (Tier 2). Lower is more privileged.                                                                                                                                                                              |