Search & Reports

The Search & Reports page provides an Advanced Search interface to generate reports on Active Directory inventory with builtin and custom queries.

Search & Reports

You can see object's attributes and descriptions with pages below.

DomainComputerUserGroupGPOOUManagedServiceAccountGroupManagedServiceAccountDelegatedManagedServiceAccountLocalUserLocalGroupCertificateAuthorityCertificateTemplateCACertificateSPNFGPPContainerVulnerabilityDNSZoneForestScriptUnknownTrustDisplaySpecifierTier0Tier2

Run On Graph

On the Search & Reports page, users can use the Run on Graph feature for both saved queries and newly created queries. This allows them to directly visualize the results in the Visualize page, offering a clear graphical representation of the data.

Saved Query

New Query

New Query

The New Query interface provides a query builder to create complex queries. You can create custom queries by using Object Type, Object Attributes, And/Or logics,Relation Directionand Groupings. You can also save these queries for later use.

Relation Direction

Active Directory Querys

Example 1 - Create Query - Risky Groups with No Member

Example - 1

Example 2 - Create Query - Users with Group Delegated Admin Right on more than 1 Computer

Example - 2

Example 3 - Saving Query - Local Admin Accounts created in the last 1 month

Example - 3

Example 4 - Using Groups - Stealth Admins in forestall.labs or windomain.labs Domains

Example - 4

Azure (Entra ID) Queries

Example 1 - Create Query - Stealth Admin in Azure

Example - 1

Example 2 - Saving Query - Azure User With Tier 0 Accounts created in the last 4 Month

Example - 2

Saved Queries

Saved Queries contains a list of various built-in queries and custom queries created by the user.

Saved Queries