_raw: <div class="progress-bar" role="progressbar" aria-valuenow="0" aria-valuemin="0" aria-valuemax="100">


_raw: <div class="progress mt-2 d-none" id="progressDomainControllers">


_raw: <button type="button" class="btn-close btn-close-white" data-bs-dismiss="modal" aria-label="Close"></button>


_raw: <div class="modal-dialog modal-full-screen-dialog" role="dialog">


_raw: <div class="modal modal-full-screen" id="mcg-DomainControllers" tabindex="-1" role="dialog" aria-hidden="true">


_raw: <button type="button" class="btn btn-primary" data-bs-dismiss="modal">Close</button>


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="Deleted objects list">


_raw: <div class="modal-dialog modal-xl" role="dialog">


_raw: <div class="modal" id="mod-deleted-10" tabindex="-1" role="dialog" aria-hidden="true">


_raw: <div class="modal" id="mod-dependancy-10" tabindex="-1" role="dialog" aria-hidden="true">


_raw: Name	Distance	Last authorized object	Path


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="Indirect member list">


_raw: <div class="modal" id="mod-indirectmember-10" tabindex="-1" role="dialog" aria-hidden="true">


_raw:
awhite1	YES	NO	NO	NO	NO	NO	NO	CN=Axel White,OU=Information Technology,OU=Departments,DC=allports,DC=local

lclark1	YES	NO	NO	NO	NO	NO	NO	CN=Logan Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local

mrivera1	YES	NO	NO	NO	NO	NO	NO	CN=Michael Rivera,OU=Information Technology,OU=Departments,DC=allports,DC=local

esmith	YES	NO	NO	NO	NO	NO	NO	CN=Erick Smith,OU=Information Technology,OU=Departments,DC=allports,DC=local

dcarter	YES	NO	NO	NO	NO	NO	NO	CN=David Carter,OU=Executive,OU=Departments,DC=allports,DC=local

iclark1	YES	NO	NO	NO	NO	NO	NO	CN=Isabella Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local

shill	YES	NO	NO	NO	NO	NO	NO	CN=Sarah Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local

emoore	YES	NO	NO	NO	NO	NO	NO	CN=Eleanor Moore,OU=Information Technology,OU=Departments,DC=allports,DC=local

pbrooks	YES	NO	NO	NO	NO	NO	NO	CN=Penelope Brooks,OU=Information Technology,OU=Departments,DC=allports,DC=local

kmiller	YES	NO	NO	NO	NO	NO	NO	CN=Kevin Miller,OU=Information Technology,OU=Departments,DC=allports,DC=local

aross1	YES	NO	NO	NO	NO	NO	NO	CN=Alessia Ross,OU=Information Technology,OU=Departments,DC=allports,DC=local

jtaylor	YES	NO	NO	NO	NO	NO	NO	CN=John Taylor,OU=Executive,OU=Departments,DC=allports,DC=local

bfinn	YES	YES	NO	NO	NO	NO	NO	CN=Bailey Finn,OU=Administration,OU=Departments,DC=allports,DC=local

khill	YES	YES	NO	NO	NO	NO	NO	CN=Kai Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local

jyoung	YES	NO	NO	NO	NO	NO	NO	CN=Josie Young,OU=Information Technology,OU=Departments,DC=allports,DC=local

efisher	YES	NO	NO	NO	NO	NO	NO	CN=Ethan Fisher,OU=Information Technology,OU=Departments,DC=allports,DC=local

nnelson	YES	NO	NO	NO	NO	NO	NO	CN=Nora Nelson,OU=Information Technology,OU=Departments,DC=allports,DC=local

ocollins	YES	NO	NO	NO	NO	NO	NO	CN=Olivia Collins,OU=Information Technology,OU=Departments,DC=allports,DC=local

jporter	YES	NO	NO	NO	NO	NO	NO	CN=James Porter,OU=Executive,OU=Departments,DC=allports,DC=local

lvega	YES	NO	NO	NO	NO	NO	NO	CN=Linda Vega,OU=Executive,OU=Departments,DC=allports,DC=local

ecarter	YES	NO	NO	NO	NO	NO	NO	CN=Emily Carter,OU=Executive,OU=Departments,DC=allports,DC=local

Administrator	YES	YES	NO	NO	NO	NO	NO	CN=Administrator,CN=Users,DC=allports,DC=local


_raw: SamAccountName	Enabled	Active	Pwd never Expired	Locked	Smart Card required	Service account	Flag Cannot be delegated present	Distinguished name


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="User list">


_raw: <div class="modal" id="mod-member-10" tabindex="-1" role="dialog" aria-hidden="true">


_raw: <label class="custom-control-label"  for="switch-2-DomainAdministrators">Hierarchical view</label>


_raw: <input type="checkbox" class="custom-control-input" checked id="switch-2-DomainAdministrators">


_raw: <label class="custom-control-label"  for="switch-1-DomainAdministrators">Compact display</label>


_raw: <input type="checkbox" class="custom-control-input" checked id="switch-1-DomainAdministrators">


_raw: <div class="progress-bar" role="progressbar" aria-valuenow="0" aria-valuemin="0" aria-valuemax="100">


_raw: <div class="progress mt-2 d-none" id="progressDomainAdministrators">


_raw: <button type="button" class="btn-close btn-close-white" data-bs-dismiss="modal" aria-label="Close"></button>


_raw: <div class="modal-dialog modal-full-screen-dialog" role="dialog">


_raw: <div class="modal modal-full-screen" id="mcg-DomainAdministrators" tabindex="-1" role="dialog" aria-hidden="true">


_raw: <button type="button" class="btn btn-primary" data-bs-dismiss="modal">Close</button>


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="Deleted objects list">


_raw: <div class="modal-dialog modal-xl" role="dialog">


_raw: <div class="modal" id="mod-deleted-9" tabindex="-1" role="dialog" aria-hidden="true">


_raw: <div class="modal" id="mod-dependancy-9" tabindex="-1" role="dialog" aria-hidden="true">


_raw: Name	Distance	Last authorized object	Path


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="Indirect member list">


_raw: <div class="modal" id="mod-indirectmember-9" tabindex="-1" role="dialog" aria-hidden="true">


_raw: <label class="custom-control-label"  for="switch-2-DnsAdmins">Hierarchical view</label>


_raw: <input type="checkbox" class="custom-control-input" checked id="switch-2-DnsAdmins">


_raw: <label class="custom-control-label"  for="switch-1-DnsAdmins">Compact display</label>


_raw: <input type="checkbox" class="custom-control-input" checked id="switch-1-DnsAdmins">


_raw: <div class="progress-bar" role="progressbar" aria-valuenow="0" aria-valuemin="0" aria-valuemax="100">


_raw: <div class="progress mt-2 d-none" id="progressDnsAdmins">


_raw: <button type="button" class="btn-close btn-close-white" data-bs-dismiss="modal" aria-label="Close"></button>


_raw: <div class="modal-dialog modal-full-screen-dialog" role="dialog">


_raw: <div class="modal modal-full-screen" id="mcg-DnsAdmins" tabindex="-1" role="dialog" aria-hidden="true">


_raw: <button type="button" class="btn btn-primary" data-bs-dismiss="modal">Close</button>


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="Deleted objects list">


_raw: <div class="modal-dialog modal-xl" role="dialog">


_raw: <div class="modal" id="mod-deleted-8" tabindex="-1" role="dialog" aria-hidden="true">


_raw: <div class="modal" id="mod-dependancy-8" tabindex="-1" role="dialog" aria-hidden="true">


_raw: Name	Distance	Last authorized object	Path


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="Indirect member list">


_raw: <div class="modal" id="mod-indirectmember-8" tabindex="-1" role="dialog" aria-hidden="true">


_raw: <label class="custom-control-label"  for="switch-2-Computerscontainer">Hierarchical view</label>


_raw: <input type="checkbox" class="custom-control-input" checked id="switch-2-Computerscontainer">


_raw: <label class="custom-control-label"  for="switch-1-Computerscontainer">Compact display</label>


_raw: <input type="checkbox" class="custom-control-input" checked id="switch-1-Computerscontainer">


_raw: <div class="progress-bar" role="progressbar" aria-valuenow="0" aria-valuemin="0" aria-valuemax="100">


_raw: <div class="progress mt-2 d-none" id="progressComputerscontainer">


_raw: <button type="button" class="btn-close btn-close-white" data-bs-dismiss="modal" aria-label="Close"></button>


_raw: <div class="modal-dialog modal-full-screen-dialog" role="dialog">


_raw: <div class="modal modal-full-screen" id="mcg-Computerscontainer" tabindex="-1" role="dialog" aria-hidden="true">


_raw: <button type="button" class="btn btn-primary" data-bs-dismiss="modal">Close</button>


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="Deleted objects list">


_raw: <div class="modal-dialog modal-xl" role="dialog">


_raw: <div class="modal" id="mod-deleted-7" tabindex="-1" role="dialog" aria-hidden="true">


_raw: <div class="modal" id="mod-dependancy-7" tabindex="-1" role="dialog" aria-hidden="true">


_raw: Name	Distance	Last authorized object	Path


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="Indirect member list">


_raw: <div class="modal" id="mod-indirectmember-7" tabindex="-1" role="dialog" aria-hidden="true">


_raw: <label class="custom-control-label"  for="switch-2-CertificatePublishers">Hierarchical view</label>


_raw: <input type="checkbox" class="custom-control-input" checked id="switch-2-CertificatePublishers">


_raw: <label class="custom-control-label"  for="switch-1-CertificatePublishers">Compact display</label>


_raw: <input type="checkbox" class="custom-control-input" checked id="switch-1-CertificatePublishers">


_raw: <div class="progress-bar" role="progressbar" aria-valuenow="0" aria-valuemin="0" aria-valuemax="100">


_raw: <div class="progress mt-2 d-none" id="progressCertificatePublishers">


_raw: <button type="button" class="btn-close btn-close-white" data-bs-dismiss="modal" aria-label="Close"></button>


_raw: <div class="modal-dialog modal-full-screen-dialog" role="dialog">


_raw: <div class="modal modal-full-screen" id="mcg-CertificatePublishers" tabindex="-1" role="dialog" aria-hidden="true">


_raw: <button type="button" class="btn btn-primary" data-bs-dismiss="modal">Close</button>


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="Deleted objects list">


_raw: <div class="modal-dialog modal-xl" role="dialog">


_raw: <div class="modal" id="mod-deleted-6" tabindex="-1" role="dialog" aria-hidden="true">


_raw: <div class="modal" id="mod-dependancy-6" tabindex="-1" role="dialog" aria-hidden="true">


_raw: Name	Distance	Last authorized object	Path


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="Indirect member list">


_raw: <div class="modal" id="mod-indirectmember-6" tabindex="-1" role="dialog" aria-hidden="true">


_raw: <label class="custom-control-label"  for="switch-2-CertificateOperators">Hierarchical view</label>


_raw: <input type="checkbox" class="custom-control-input" checked id="switch-2-CertificateOperators">


_raw: <label class="custom-control-label"  for="switch-1-CertificateOperators">Compact display</label>


_raw: <input type="checkbox" class="custom-control-input" checked id="switch-1-CertificateOperators">


_raw: <div class="progress-bar" role="progressbar" aria-valuenow="0" aria-valuemin="0" aria-valuemax="100">


_raw: <div class="progress mt-2 d-none" id="progressCertificateOperators">


_raw: <button type="button" class="btn-close btn-close-white" data-bs-dismiss="modal" aria-label="Close"></button>


_raw: <div class="modal-dialog modal-full-screen-dialog" role="dialog">


_raw: <div class="modal modal-full-screen" id="mcg-CertificateOperators" tabindex="-1" role="dialog" aria-hidden="true">


_raw: <button type="button" class="btn btn-primary" data-bs-dismiss="modal">Close</button>


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="Deleted objects list">


_raw: <div class="modal-dialog modal-xl" role="dialog">


_raw: <div class="modal" id="mod-deleted-5" tabindex="-1" role="dialog" aria-hidden="true">


_raw: <div class="modal" id="mod-dependancy-5" tabindex="-1" role="dialog" aria-hidden="true">


_raw: Name	Distance	Last authorized object	Path


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="Indirect member list">


_raw: <div class="modal" id="mod-indirectmember-5" tabindex="-1" role="dialog" aria-hidden="true">


_raw: <label class="custom-control-label"  for="switch-2-BuiltinOU">Hierarchical view</label>


_raw: <input type="checkbox" class="custom-control-input" checked id="switch-2-BuiltinOU">


_raw: <label class="custom-control-label"  for="switch-1-BuiltinOU">Compact display</label>


_raw: <input type="checkbox" class="custom-control-input" checked id="switch-1-BuiltinOU">


_raw: <div class="progress-bar" role="progressbar" aria-valuenow="0" aria-valuemin="0" aria-valuemax="100">


_raw: <div class="progress mt-2 d-none" id="progressBuiltinOU">


_raw: <button type="button" class="btn-close btn-close-white" data-bs-dismiss="modal" aria-label="Close"></button>


_raw: <div class="modal-dialog modal-full-screen-dialog" role="dialog">


_raw: <div class="modal modal-full-screen" id="mcg-BuiltinOU" tabindex="-1" role="dialog" aria-hidden="true">


_raw: <button type="button" class="btn btn-primary" data-bs-dismiss="modal">Close</button>


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="Deleted objects list">


_raw: <div class="modal-dialog modal-xl" role="dialog">


_raw: <div class="modal" id="mod-deleted-4" tabindex="-1" role="dialog" aria-hidden="true">


_raw: <div class="modal" id="mod-dependancy-4" tabindex="-1" role="dialog" aria-hidden="true">


_raw: Name	Distance	Last authorized object	Path


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="Indirect member list">


_raw: <div class="modal" id="mod-indirectmember-4" tabindex="-1" role="dialog" aria-hidden="true">


_raw: <label class="custom-control-label"  for="switch-2-BackupOperators">Hierarchical view</label>


_raw: <input type="checkbox" class="custom-control-input" checked id="switch-2-BackupOperators">


_raw: <label class="custom-control-label"  for="switch-1-BackupOperators">Compact display</label>


_raw: <input type="checkbox" class="custom-control-input" checked id="switch-1-BackupOperators">


_raw: <div class="progress-bar" role="progressbar" aria-valuenow="0" aria-valuemin="0" aria-valuemax="100">


_raw: <div class="progress mt-2 d-none" id="progressBackupOperators">


_raw: <button type="button" class="btn-close btn-close-white" data-bs-dismiss="modal" aria-label="Close"></button>


_raw: <div class="modal-dialog modal-full-screen-dialog" role="dialog">


_raw: <div class="modal modal-full-screen" id="mcg-BackupOperators" tabindex="-1" role="dialog" aria-hidden="true">


_raw: <button type="button" class="btn btn-primary" data-bs-dismiss="modal">Close</button>


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="Deleted objects list">


_raw: <div class="modal-dialog modal-xl" role="dialog">


_raw: <div class="modal" id="mod-deleted-3" tabindex="-1" role="dialog" aria-hidden="true">


_raw: <div class="modal" id="mod-dependancy-3" tabindex="-1" role="dialog" aria-hidden="true">


_raw: Name	Distance	Last authorized object	Path


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="Indirect member list">


_raw: <div class="modal" id="mod-indirectmember-3" tabindex="-1" role="dialog" aria-hidden="true">


_raw: <label class="custom-control-label"  for="switch-2-AdminSDHoldercontainer">Hierarchical view</label>


_raw: <input type="checkbox" class="custom-control-input" checked id="switch-2-AdminSDHoldercontainer">


_raw: <label class="custom-control-label"  for="switch-1-AdminSDHoldercontainer">Compact display</label>


_raw: <input type="checkbox" class="custom-control-input" checked id="switch-1-AdminSDHoldercontainer">


_raw: <div class="progress-bar" role="progressbar" aria-valuenow="0" aria-valuemin="0" aria-valuemax="100">


_raw: <div class="progress mt-2 d-none" id="progressAdminSDHoldercontainer">


_raw: <button type="button" class="btn-close btn-close-white" data-bs-dismiss="modal" aria-label="Close"></button>


_raw: <div class="modal-dialog modal-full-screen-dialog" role="dialog">


_raw: <div class="modal modal-full-screen" id="mcg-AdminSDHoldercontainer" tabindex="-1" role="dialog" aria-hidden="true">


_raw: <button type="button" class="btn btn-primary" data-bs-dismiss="modal">Close</button>


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="Deleted objects list">


_raw: <div class="modal-dialog modal-xl" role="dialog">


_raw: <div class="modal" id="mod-deleted-2" tabindex="-1" role="dialog" aria-hidden="true">


_raw: <div class="modal" id="mod-dependancy-2" tabindex="-1" role="dialog" aria-hidden="true">


_raw: Name	Distance	Last authorized object	Path


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="Indirect member list">


_raw: <div class="modal" id="mod-indirectmember-2" tabindex="-1" role="dialog" aria-hidden="true">


_raw:
Admin	YES	NO	YES	NO	NO	NO	NO	CN=Admin,CN=Users,DC=allports,DC=local

cloudbase-init	YES	YES	YES	NO	NO	NO	NO	CN=cloudbase-init,CN=Users,DC=allports,DC=local

Administrator	YES	YES	NO	NO	NO	NO	NO	CN=Administrator,CN=Users,DC=allports,DC=local

awhite1	YES	NO	NO	NO	NO	NO	NO	CN=Axel White,OU=Information Technology,OU=Departments,DC=allports,DC=local

lclark1	YES	NO	NO	NO	NO	NO	NO	CN=Logan Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local

mrivera1	YES	NO	NO	NO	NO	NO	NO	CN=Michael Rivera,OU=Information Technology,OU=Departments,DC=allports,DC=local

esmith	YES	NO	NO	NO	NO	NO	NO	CN=Erick Smith,OU=Information Technology,OU=Departments,DC=allports,DC=local

dcarter	YES	NO	NO	NO	NO	NO	NO	CN=David Carter,OU=Executive,OU=Departments,DC=allports,DC=local

iclark1	YES	NO	NO	NO	NO	NO	NO	CN=Isabella Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local

shill	YES	NO	NO	NO	NO	NO	NO	CN=Sarah Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local

emoore	YES	NO	NO	NO	NO	NO	NO	CN=Eleanor Moore,OU=Information Technology,OU=Departments,DC=allports,DC=local

pbrooks	YES	NO	NO	NO	NO	NO	NO	CN=Penelope Brooks,OU=Information Technology,OU=Departments,DC=allports,DC=local

kmiller	YES	NO	NO	NO	NO	NO	NO	CN=Kevin Miller,OU=Information Technology,OU=Departments,DC=allports,DC=local

aross1	YES	NO	NO	NO	NO	NO	NO	CN=Alessia Ross,OU=Information Technology,OU=Departments,DC=allports,DC=local

jtaylor	YES	NO	NO	NO	NO	NO	NO	CN=John Taylor,OU=Executive,OU=Departments,DC=allports,DC=local

bfinn	YES	YES	NO	NO	NO	NO	NO	CN=Bailey Finn,OU=Administration,OU=Departments,DC=allports,DC=local

khill	YES	YES	NO	NO	NO	NO	NO	CN=Kai Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local

jyoung	YES	NO	NO	NO	NO	NO	NO	CN=Josie Young,OU=Information Technology,OU=Departments,DC=allports,DC=local

efisher	YES	NO	NO	NO	NO	NO	NO	CN=Ethan Fisher,OU=Information Technology,OU=Departments,DC=allports,DC=local

nnelson	YES	NO	NO	NO	NO	NO	NO	CN=Nora Nelson,OU=Information Technology,OU=Departments,DC=allports,DC=local

ocollins	YES	NO	NO	NO	NO	NO	NO	CN=Olivia Collins,OU=Information Technology,OU=Departments,DC=allports,DC=local

jporter	YES	NO	NO	NO	NO	NO	NO	CN=James Porter,OU=Executive,OU=Departments,DC=allports,DC=local

lvega	YES	NO	NO	NO</sp


_raw: SamAccountName	Enabled	Active	Pwd never Expired	Locked	Smart Card required	Service account	Flag Cannot be delegated present	Distinguished name


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="User list">


_raw: <div class="modal" id="mod-member-2" tabindex="-1" role="dialog" aria-hidden="true">


_raw: <label class="custom-control-label"  for="switch-2-Administrators">Hierarchical view</label>


_raw: <input type="checkbox" class="custom-control-input" checked id="switch-2-Administrators">


_raw: <label class="custom-control-label"  for="switch-1-Administrators">Compact display</label>


_raw: <input type="checkbox" class="custom-control-input" checked id="switch-1-Administrators">


_raw: <div class="progress-bar" role="progressbar" aria-valuenow="0" aria-valuemin="0" aria-valuemax="100">


_raw: <div class="progress mt-2 d-none" id="progressAdministrators">


_raw: <button type="button" class="btn-close btn-close-white" data-bs-dismiss="modal" aria-label="Close"></button>


_raw: <div class="modal-dialog modal-full-screen-dialog" role="dialog">


_raw: <div class="modal modal-full-screen" id="mcg-Administrators" tabindex="-1" role="dialog" aria-hidden="true">


_raw: <button type="button" class="btn btn-primary" data-bs-dismiss="modal">Close</button>


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="Deleted objects list">


_raw: <div class="modal-dialog modal-xl" role="dialog">


_raw: <div class="modal" id="mod-deleted-1" tabindex="-1" role="dialog" aria-hidden="true">


_raw: <div class="modal" id="mod-dependancy-1" tabindex="-1" role="dialog" aria-hidden="true">


_raw: Name	Distance	Last authorized object	Path


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="Indirect member list">


_raw: <div class="modal" id="mod-indirectmember-1" tabindex="-1" role="dialog" aria-hidden="true">


_raw: <label class="custom-control-label"  for="switch-2-Administrator">Hierarchical view</label>


_raw: <input type="checkbox" class="custom-control-input" checked id="switch-2-Administrator">


_raw: <label class="custom-control-label"  for="switch-1-Administrator">Compact display</label>


_raw: <input type="checkbox" class="custom-control-input" checked id="switch-1-Administrator">


_raw: <div class="progress-bar" role="progressbar" aria-valuenow="0" aria-valuemin="0" aria-valuemax="100">


_raw: <div class="progress mt-2 d-none" id="progressAdministrator">


_raw: <button type="button" class="btn-close btn-close-white" data-bs-dismiss="modal" aria-label="Close"></button>


_raw: <div class="modal-dialog modal-full-screen-dialog" role="dialog">


_raw: <div class="modal modal-full-screen" id="mcg-Administrator" tabindex="-1" role="dialog" aria-hidden="true">


_raw: <button type="button" class="btn btn-primary" data-bs-dismiss="modal">Close</button>


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="Deleted objects list">


_raw: <div class="modal-dialog modal-xl" role="dialog">


_raw: <div class="modal" id="mod-deleted-0" tabindex="-1" role="dialog" aria-hidden="true">


_raw: <div class="modal" id="mod-dependancy-0" tabindex="-1" role="dialog" aria-hidden="true">


_raw: Name	Distance	Last authorized object	Path


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="Indirect member list">


_raw: <div class="modal" id="mod-indirectmember-0" tabindex="-1" role="dialog" aria-hidden="true">


_raw: <label class="custom-control-label"  for="switch-2-AccountOperators">Hierarchical view</label>


_raw: <input type="checkbox" class="custom-control-input" checked id="switch-2-AccountOperators">


_raw: <label class="custom-control-label"  for="switch-1-AccountOperators">Compact display</label>


_raw: <input type="checkbox" class="custom-control-input" checked id="switch-1-AccountOperators">


_raw: <div class="progress-bar" role="progressbar" aria-valuenow="0" aria-valuemin="0" aria-valuemax="100">


_raw: <div class="progress mt-2 d-none" id="progressAccountOperators">


_raw: <button type="button" class="btn-close btn-close-white" data-bs-dismiss="modal" aria-label="Close"></button>


_raw: <div class="modal-dialog modal-full-screen-dialog" role="dialog">


_raw: <div class="modal modal-full-screen" id="mcg-AccountOperators" tabindex="-1" role="dialog" aria-hidden="true">


_raw:
AdminSDHolder container	Critical			0	0	None	Analysis

Builtin OU	Medium			0	0	None	Analysis

Computers container	Medium			0	0	None	Analysis

Domain Controllers	Critical	0	1 (Details)	0	0	None	Analysis

Domain Root	Medium			0	0	None	Analysis

Enterprise Read Only Domain Controllers	Other	0	0	0	0	None	Analysis

Group Policy Creator Owners	Medium	1 (Details)	0	0	0	None	Analysis

Krbtgt account	Medium			0	0	None	Analysis

Read Only Domain Controllers	Medium	0	0	0	0	None	Analysis

Users container	Medium			0	0	None	Analysis


_raw: Group or user account 	Priority 	Users member 	Computer member of the group 	Indirect control 	Unresolved members 	Links 	Detail


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="Summary of group">


_raw: If the report has been saved which the full details, each object can be zoomed with its full detail. If it is not the case, for privacy reasons, only general statistics are available.


_raw: <!-- SubSection Critical Infrastructure -->


_raw:
Account Operators	High	0	0	0	0	None	Analysis

Administrator	Critical			0	0	None	Analysis

Administrators	Critical	24 (Details)	0	0	0	None	Analysis

Backup Operators	High	0	0	0	0	None	Analysis

Certificate Operators	Medium	0	0	0	0	None	Analysis

Certificate Publishers	Other	0	0	0	0	None	Analysis

Dns Admins	Medium	0	0	0	0	None	Analysis

Domain Administrators	Critical	22 (Details)	0	0	0	None	Analysis

Enterprise Administrators	Critical	1 (Details)	0	0	0	None	Analysis

Enterprise Key Administrators	Medium	0	0	0	0	None	Analysis

Key Administrators	Medium	0	0	0	0	None	Analysis

Print Operators	Medium	0	0	0	0	None	Analysis

Replicator	Medium	0	0	0	0	None	Analysis

Schema Administrators	Critical	1 (Details)	0	0	0	None	Analysis

Server Operators	High	0	0	0	0	None	Analysis


_raw:
Critical	NO	0	0	0

High	NO	0	0	0

Medium	NO	0	0	0

Other	NO	0	0	0


_raw: Priority to remediate 	Critical Object Found 	Number of objects with Indirect 	Max number of indirect numbers 	Max ratio


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="Compromise Grapth Indirect links list">


_raw:
This part tries to summarize in a single table if major issues have been found.
Focus on finding critical objects such as the Everyone group then try to decrease the number of objects having indirect access.
The detail is displayed below.


_raw:
This analysis focuses on accounts found in control path and located in other domains.

No operative link with other domains has been found.


_raw:
This section focuses on permissions issues that can be exploited to take control of the domain.
This is an advanced section that should be examined after having looked at the Admin Groups section.


_raw: <div class="card-body collapse show" id="panelsectionControlPathsAnalysis">


_raw: <!-- Accordion delegationaccordeondcsync end -->


_raw: DC=allports	APT\Domain Controllers	EXT_RIGHT_REPLICATION_GET_CHANGES_ALL


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="Delegations list">


_raw: <div id="dcsyncdelegation" class="collapse" aria-labelledby="headingdcsyncdelegation" data-parent="#delegationaccordeondcsync">


_raw: <button class="btn btn-link" data-bs-toggle="collapse" data-bs-target="#dcsyncdelegation" aria-expanded="false" aria-controls="dcsyncdelegation">


_raw: <!-- Accordion delegationaccordeondcsync -->


_raw: In particular for AD database access (DCSync, AADConnect, ...).


_raw: <!-- Accordion unprotectedOUaccordeon end -->


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="Unprotected OU">


_raw: <div id="unprotectedOU" class="collapse" aria-labelledby="headingunprotectedOU" data-parent="#unprotectedOUaccordeon">


_raw: <button class="btn btn-link" data-bs-toggle="collapse" data-bs-target="#unprotectedOU" aria-expanded="false" aria-controls="unprotectedOU">


_raw: <!-- Accordion unprotectedOUaccordeon -->


_raw: The OU that are listed as not protected are:


_raw: <!-- Accordion delegationaccordeon end -->


_raw:
DC=allports	APT\Domain Controllers	EXT_RIGHT_REPLICATION_GET_CHANGES_ALL

CN=Policies,CN=System	APT\Group Policy Creator Owners	CreateChild, CreateChild (All Objects)

CN=RAS and IAS Servers Access Check,CN=System	APT\RAS and IAS Servers	GenericWrite, WriteDacl, WriteOwner, CreateChild, WriteDacl (All Objects), All extended right, DSSelf, Write all prop

CN=WMIPolicy,CN=System	APT\Group Policy Creator Owners	GenericWrite, CreateChild, CreateChild (All Objects), DSSelf, Write all prop

CN=PolicyTemplate,CN=WMIPolicy,CN=System	APT\Group Policy Creator Owners	CreateChild, CreateChild (All Objects)

CN=PolicyType,CN=WMIPolicy,CN=System	APT\Group Policy Creator Owners	CreateChild, CreateChild (All Objects)

CN=SOM,CN=WMIPolicy,CN=System	APT\Group Policy Creator Owners	GenericWrite, CreateChild, CreateChild (All Objects), DSSelf, Write all prop

CN=WMIGPO,CN=WMIPolicy,CN=System	APT\Group Policy Creator Owners	CreateChild, CreateChild (All Objects)


_raw: <div id="alldelegation" class="collapse" aria-labelledby="headingalldelegation" data-parent="#delegationaccordeon">


_raw: <button class="btn btn-link" data-bs-toggle="collapse" data-bs-target="#alldelegation" aria-expanded="false" aria-controls="alldelegation">


_raw: Each specific rights defined for Organizational Unit (OU) are listed below.


_raw: This feature is reserved for customers who have purchased a license


_raw: <!-- Accordion admingroupsaccordeon end -->


_raw:
Admin	YES	NO	YES	NO	NO	NO	NO	2025-11-05 14:15:24Z	Not set	2025-11-05 09:04:58Z	NO	CN=Admin,CN=Users,DC=allports,DC=local

Administrator	YES	YES	NO	NO	NO	NO	NO	2025-11-05 14:15:24Z	2025-11-05 09:44:11Z	2025-11-05 09:08:18Z	NO	CN=Administrator,CN=Users,DC=allports,DC=local

aross1	YES	NO	NO	NO	NO	NO	NO	2025-11-05 14:20:17Z	Not set	2025-11-05 09:20:17Z	NO	CN=Alessia Ross,OU=Information Technology,OU=Departments,DC=allports,DC=local

awhite1	YES	NO	NO	NO	NO	NO	NO	2025-11-05 14:21:44Z	Not set	2025-11-05 09:21:44Z	NO	CN=Axel White,OU=Information Technology,OU=Departments,DC=allports,DC=local

bfinn	YES	YES	NO	NO	NO	NO	NO	2025-11-05 14:19:51Z	2025-11-05 09:50:49Z	2025-11-05 09:19:51Z	NO	CN=Bailey Finn,OU=Administration,OU=Departments,DC=allports,DC=local

cloudbase-init	YES	YES	YES	NO	NO	NO	NO	2025-11-05 14:15:24Z	2025-11-05 09:17:05Z	2025-11-05 09:06:36Z	NO	CN=cloudbase-init,CN=Users,DC=allports,DC=local

dcarter	YES	NO	NO	NO	NO	NO	NO	2025-11-05 14:21:12Z	Not set	2025-11-05 09:21:12Z	NO	CN=David Carter,OU=Executive,OU=Departments,DC=allports,DC=local

ecarter	YES	NO	NO	NO	NO	NO	NO	2025-11-05 14:18:53Z	Not set	2025-11-05 09:18:53Z	NO	CN=Emily Carter,OU=Executive,OU=Departments,DC=allports,DC=local

efisher	YES	NO	NO	NO	NO	NO	NO	2025-11-05 14:19:27Z	Not set	2025-11-05 09:19:27Z	NO	CN=Ethan Fisher,OU=Information Technology,OU=Departments,DC=allports,DC=local

emoore	YES	NO	NO	NO	NO	NO	NO	2025-11-05 14:20:31Z	Not set	2025-11-05 09:20:31Z	NO	CN=Eleanor Moore,OU=Information Technology,OU=Departments,DC=allports,DC=local

esmith	YES	NO	NO	NO	NO	NO	NO	2025-11-05 14:21:31Z	Not set	2025-11-05 09:21:31Z	NO	CN=Erick Smith,OU=Information Technology,OU=Departments,DC=allports,DC=local

iclark1	YES	NO	NO	NO	NO	NO	NO	2025-11-05 14:21:01Z	Not set	2025-11-05 09:21:01Z	NO	CN=Isabella Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local

jporter	YES	NO	NO	NO	NO	NO	NO	2025-11-05 14:18:56Z	Not set	2025-11-05 09:18:56Z	NO	CN=James Porter,OU=Executive,OU=Departments,DC=allports,DC=local

jtaylor	YES	NO	NO	NO	NO	NO	NO	2025-11-05 14:20:15Z	Not set	2025-11-05 09:20:15Z	NO	CN=John Taylor,OU=Executive,OU=Departments,DC=allports,DC=local

jyoung	YES	NO	NO	NO	NO	NO	NO	2025-11-05 14:19:44Z	Not set	2025-11-05 09:19:44Z	NO	CN=Josie Young,OU=Information Technology,OU=Departments,DC=allports,DC=local

khill	YES	YES	NO	NO	NO	NO	NO	2025-11-05 14:19:49Z	2025-11-05 09:50:50Z	2025-11-05 09:19:49Z	NO	CN=Ka


_raw: SamAccountName 	Enabled 	Active 	Pwd never Expired 	Locked 	Smart Card required 	Service account 	Flag Cannot be delegated present 	Creation date 	Last login 	Password last set 	In Protected Users 	Distinguished name


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="Admin groups detail">


_raw: <div id="allprivileged" class="collapse" aria-labelledby="headingallprivileged" data-parent="#admingroupsaccordeon">


_raw: <button class="btn btn-link" data-bs-toggle="collapse" data-bs-target="#allprivileged" aria-expanded="false" aria-controls="allprivileged">


_raw: <button type="button" class="btn btn-primary" data-bs-dismiss="modal">Close</button>


_raw: Administrator	YES	YES	NO	NO	NO	NO	NO	2025-11-05 14:15:24Z	2025-11-05 09:44:11Z	2025-11-05 09:08:18Z	NO	CN=Administrator,CN=Users,DC=allports,DC=local


_raw: <button type="button" class="btn-close btn-close-white" data-bs-dismiss="modal" aria-label="Close"></button>


_raw: <div class="modal-dialog modal-xl" role="dialog">


_raw: <div class="modal" id="modalSchema-Administrators" tabindex="-1" role="dialog" aria-hidden="true">


_raw: <div class="modal" id="modalEnterprise-Administrators" tabindex="-1" role="dialog" aria-hidden="true">


_raw:
Administrator	YES	YES	NO	NO	NO	NO	NO	2025-11-05 14:15:24Z	2025-11-05 09:44:11Z	2025-11-05 09:08:18Z	NO	CN=Administrator,CN=Users,DC=allports,DC=local

aross1	YES	NO	NO	NO	NO	NO	NO	2025-11-05 14:20:17Z	Not set	2025-11-05 09:20:17Z	NO	CN=Alessia Ross,OU=Information Technology,OU=Departments,DC=allports,DC=local

awhite1	YES	NO	NO	NO	NO	NO	NO	2025-11-05 14:21:44Z	Not set	2025-11-05 09:21:44Z	NO	CN=Axel White,OU=Information Technology,OU=Departments,DC=allports,DC=local

bfinn	YES	YES	NO	NO	NO	NO	NO	2025-11-05 14:19:51Z	2025-11-05 09:50:49Z	2025-11-05 09:19:51Z	NO	CN=Bailey Finn,OU=Administration,OU=Departments,DC=allports,DC=local

dcarter	YES	NO	NO	NO	NO	NO	NO	2025-11-05 14:21:12Z	Not set	2025-11-05 09:21:12Z	NO	CN=David Carter,OU=Executive,OU=Departments,DC=allports,DC=local

ecarter	YES	NO	NO	NO	NO	NO	NO	2025-11-05 14:18:53Z	Not set	2025-11-05 09:18:53Z	NO	CN=Emily Carter,OU=Executive,OU=Departments,DC=allports,DC=local

efisher	YES	NO	NO	NO	NO	NO	NO	2025-11-05 14:19:27Z	Not set	2025-11-05 09:19:27Z	NO	CN=Ethan Fisher,OU=Information Technology,OU=Departments,DC=allports,DC=local

emoore	YES	NO	NO	NO	NO	NO	NO	2025-11-05 14:20:31Z	Not set	2025-11-05 09:20:31Z	NO	CN=Eleanor Moore,OU=Information Technology,OU=Departments,DC=allports,DC=local

esmith	YES	NO	NO	NO	NO	NO	NO	2025-11-05 14:21:31Z	Not set	2025-11-05 09:21:31Z	NO	CN=Erick Smith,OU=Information Technology,OU=Departments,DC=allports,DC=local

iclark1	YES	NO	NO	NO	NO	NO	NO	2025-11-05 14:21:01Z	Not set	2025-11-05 09:21:01Z	NO	CN=Isabella Clark,OU=Information Technology,OU=Departments,DC=allports,DC=local

jporter	YES	NO	NO	NO	NO	NO	NO	2025-11-05 14:18:56Z	Not set	2025-11-05 09:18:56Z	NO	CN=James Porter,OU=Executive,OU=Departments,DC=allports,DC=local

jtaylor	YES	NO	NO	NO	NO	NO	NO	2025-11-05 14:20:15Z	Not set	2025-11-05 09:20:15Z	NO	CN=John Taylor,OU=Executive,OU=Departments,DC=allports,DC=local

jyoung	YES	NO	NO	NO	NO	NO	NO	2025-11-05 14:19:44Z	Not set	2025-11-05 09:19:44Z	NO	CN=Josie Young,OU=Information Technology,OU=Departments,DC=allports,DC=local

khill	YES	YES	NO	NO	NO	NO	NO	2025-11-05 14:19:49Z	2025-11-05 09:50:50Z	2025-11-05 09:19:49Z	NO	CN=Kai Hill,OU=Information Technology,OU=Departments,DC=allports,DC=local

kmiller	YES	NO	NO	NO	NO	NO	NO	2025-11-05 14:20:18Z	Not set	2025-11-05 09:20:18Z	NO	CN=Kevin Miller,OU=Information Technology,OU=Departments,DC=allports,DC=local

lclark1	YES	NO	NO	NO	NO	NO	NO	2025-11-05 14:21:37Z	Not set	2025-11-05 09:21:37Z	<span class="unti


_raw: <div class="modal" id="modalDomain-Administrators" tabindex="-1" role="dialog" aria-hidden="true">


_raw: <div class="modal" id="modalAdministrators" tabindex="-1" role="dialog" aria-hidden="true">


_raw:
Account Operators	0	0	0	0	0	0	0	0	0	0

Administrators	24	24	0	20	2	0	0	24	0	0

Backup Operators	0	0	0	0	0	0	0	0	0	0

Certificate Operators	0	0	0	0	0	0	0	0	0	0

Certificate Publishers	0	0	0	0	0	0	0	0	0	0

Dns Admins	0	0	0	0	0	0	0	0	0	0

Domain Administrators	22	22	0	19	0	0	0	22	0	0

Enterprise Administrators	1	1	0	0	0	0	0	1	0	0

Enterprise Key Administrators	0	0	0	0	0	0	0	0	0	0

Key Administrators	0	0	0	0	0	0	0	0	0	0

Print Operators	0	0	0	0	0	0	0	0	0	0

Replicator	0	0	0	0	0	0	0	0	0	0

Schema Administrators	1	1	0	0	0	0	0	1	0	0

Server Operators	0	0	0	0	0	0	0	0	0	0


_raw: Group Name	Nb Admins 	Nb Enabled 	Nb Disabled 	Nb Inactive 	Nb PWd never expire 	Nb Smart Card required 	Nb Service accounts 	Nb can be delegated 	Nb external users 	Nb protected users


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="Admin groups list">


_raw: This section is focused on the groups which are critical for admin activities. If the report has been saved which the full details, each group can be zoomed with its members. If it is not the case, for privacy reasons, only general statistics are available.


_raw: <div class="card-body collapse show" id="panelsectionAdminGroups">


_raw: <!-- Section Computer Information end -->


_raw: This feature is reserved for customers who have purchased a license


_raw: <!-- Accordion domaincontrollers end -->


_raw:
APT-DC-01	Windows 2022	TRUE	FALSE	2025-11-05 14:16:25Z	2025-11-05 09:16:27Z	003 days	APT\Domain Admins	NO	NO	YES	PDC,
RID pool manager,
Infrastructure master,
Schema master,
Domain naming Master	NO


_raw: Domain controller	Operating System	IsGlobalCatalog	IsReadOnly	Creation Date 	Startup Time	Uptime	Owner 	Null sessions 	SMB v1 	Remote spooler 	FSMO role 	WebDAV


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="Domain Controllers list">


_raw: <div id="domaincontrollersdetail" class="collapse" aria-labelledby="headingdomaincontrollersdetail" data-parent="#domaincontrollers">


_raw: <button class="btn btn-link" data-bs-toggle="collapse" data-bs-target="#domaincontrollersdetail" aria-expanded="false" aria-controls="domaincontrollersdetail">


_raw: Here is a specific zoom related to the Active Directory servers: the domain controllers.


_raw:
OperatingSystem not set	2	2	0	2	0	0	0	0	0

Windows Server 2022 21H2	1	1	0	1	0	0	0	1	0


_raw: Operating System	Nb OS	Nb Enabled 	Nb Disabled 	Nb Active 	Nb Inactive 	Nb AccessDenied 	Nb SidHistory 	Nb Bad PrimaryGroup 	Nb unconstrained delegations 	Nb Reversible password


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="Operating System list">


_raw: If you need to find the computers running a specific OS, we advise to use PingCastle.exe and the export / computers feature available from the main menu. Indeed the computer details are not included in the report for performance issues. Doing this will impact significantly the report size and the time to load the report.


_raw: <!-- Accordion computersaccordion end -->


_raw: Name	Creation	Last logon	Pwd Last Set	Distinguished name


_raw: <table class="table table-striped table-bordered" data-toggle="table" data-pagination="true" data-search="true" data-show-export="true" data-page-list="[10,25,50,100,200,All]" aria-label="Account list">


_raw: <div id="sectiontrusteddelegationcomputer" class="collapse" aria-labelledby="headingsectiontrusteddelegationcomputer" data-parent="#computersaccordion">


_raw: Objects trusted to authenticate for delegation


_raw: <button class="btn btn-link" data-bs-toggle="collapse" data-bs-target="#sectiontrusteddelegationcomputer" aria-expanded="false" aria-controls="sectiontrusteddelegationcomputer">


_raw: <div id="sectionnotaesenableduser" class="collapse" aria-labelledby="headingsectionnotaesenableduser" data-parent="#usersaccordion">


_raw: Objects where AES usage with kerberos may be cause issues <i class="info-mark d-print-none has-tooltip" data-bs-placement="bottom" data1-bs-toggle="tooltip" title="" data-bs-original-title="Accounts are listed if 1) no password changed occured after the first DC Win 2008 install to initate AES secrets or 2) they have a SPN and the account is not flaged to use AES for encryption with msDS-SupportedEncryptionTypes"></i>


_raw: <button class="btn btn-link" data-bs-toggle="collapse" data-bs-target="#sectionnotaesenableduser" aria-expanded="false" aria-controls="sectionnotaesenableduser">


_raw: <div id="sectionpwdnotrequireduser" class="collapse" aria-labelledby="headingsectionpwdnotrequireduser" data-parent="#usersaccordion">


_raw: Objects which can have an empty password


_raw: <button class="btn btn-link" data-bs-toggle="collapse" data-bs-target="#sectionpwdnotrequireduser" aria-expanded="false" aria-controls="sectionpwdnotrequireduser">


_raw:
allports.local	APT	Windows Server 2016	Windows Server 2016	2025-11-05 14:15:18Z	1	Windows Server 2019	FALSE
Entra ID Configuration
No Entra ID configuration has been found in this domain
User Information
This section gives information about the user accounts stored in the Active Directory
Account analysis
Nb User Accounts	Nb Enabled 	Nb Disabled 	Nb Active 	Nb Inactive 	Nb AccessDenied 	Nb Locked 	Nb pwd never Expire 	Nb SidHistory 	Nb Bad PrimaryGroup 	Nb Password not Req. 	Nb Des enabled. 	Nb unconstrained delegations 	Nb Reversible password
2854	2854	0	2854	0	0	0	3	0	0	1	0	0	0
 [3]
 [1]
 [2853]
Password Age Distribution
This feature is reserved for customers who have purchased a license
Computer Information
Account analysis
This section gives information about the computer accounts stored in the Active Directory
Nb Computer Accounts	Nb Enabled 	Nb Disabled 	Nb Active 	Nb Inactive 	Nb AccessDenied 	Nb SidHistory 	Nb Bad PrimaryGroup 	Nb unconstrained delegations 	Nb Reversible password
3	3	0	3	0	0	0	1	0
 [3]
 [1]
Operating Systems
If you need to find the computers running a specific OS, we advise to use PingCastle.exe and the export / computers feature available from the main menu. Indeed the computer details are not included in the report for performance issues. Doing this will impact significantly the report size and the time to load the report.
Search
Operating System
Nb OS
Nb Enabled
Nb Disabled
Nb Active
Nb Inactive
Nb AccessDenied
Nb SidHistory
Nb Bad PrimaryGroup
Nb unconstrained delegations
Nb Reversible password
OperatingSystem not set	2	2	0	2	0	0	0	0	0
Windows Server 2022 21H2	1	1	0	1	0	0	0	1	0
Showing 1 to 2 of 2 rows
Domain controllers
Here is a specific zoom related to the Active Directory servers: the domain controllers.
 [1]
LAPS Analysis
This feature is reserved for customers who have purchased a license
Admin Groups
Groups
This section is focused on the groups which are critical for admin activities. If the report has been saved which the full details, each group can be zoomed with its members. If it is not the case, for privacy reasons, only general statistics are available.
Search
Group Name
Nb Admins
Nb Enabled
Nb Disabled
Nb Inactive
Nb PWd never expire
Nb Smart Card required
Nb Service accounts
Nb can be delegated
Nb external users
Nb protected users
Account Operators	0	0	0	0	0	0	0	0	0	0
Administrators	24	24	0	20	2	0	0	24	0	0
Backup Operators	0	0	0	0	0	0	0	0	0	0
Certificate Operators	0	0	0	0	0	0	0	0	0	0
Certificate Publishers	0	0	0	0	0	0	0	0	0	0
Dns Admins	0	0	0	0	0	0	0	0	0	0
Domain Administrators	22	22	0	19	0	0	0	22	0	0
Enterprise Administrators	1	1	0	0	0	0	0	1	0	0
Enterprise Key Administrators	0	0	0	0	0	0	0	0	0	0
Key Administrators	0	0	0	0	0	0	0	0	0	0
Showing 1 to 10 of 14 rows  rows per page
‹
1
2
›
 [24]
Last Logon Distribution
This feature is reserved for customers who have purchased a license
Delegations
Each specific rights defined for Organizational Unit (OU) are listed below.
 [8]
The OU that are listed as not protected are:
 [1]
In particular for AD database access (DCSync, AADConnect, ...).
 [1]
Control Paths Analysis
This section focuses on permissions issues that can be exploited to take control of the domain.
This is an advanced section that should be examined after having looked at the Admin Groups section.
Foreign domain involved
This analysis focuses on accounts found in control path and located in other domains.
No operative link with other domains has been found.
Indirect links
This part tries to summarize in a single table if major issues have been found.
Focus on finding critical objects such as the Everyone group then try to decrease the number of objects having indirect access.
The detail is displayed below.
Search
Priority to remediate
Critical Object Found
Number of objects with Indirect
Max number of indirect numbers
Max ratio
Critical	NO	0	0	0
High	NO	0	0	0
Medium	NO	0	0	0
Other	NO	0	0	0
Showing 1 to 4 of 4 rows
Admin groups
If the report has been saved which the full details, each object can be zoomed with its full detail. If it is not the case, for privacy reasons, only general statistics are available.
Search
Group or user account
Priority
Users member
Computer member of the group
Indirect control
Unresolved members
Links
Detail
Account Operators	High	0	0	0	0	None	Analysis
Administrator	Critical			0	0	None	Analysis
Administrators	Critical	24 (Details)	0	0	0	None	Analysis
Backup Operators	High	0	0	0	0	None	Analysis
Certificate Operators	Medium	0	0	0	0	None	Analysis
Certificate Publishers	Other	0	0	0	0	None	Analysis
Dns Admins	Medium	0	0	0	0	None	Analysis
Domain Administrators	Critical	22 (Details)	0	0	0	None	Analysis
Enterprise Administrators	Critical	1 (Details)	0	0	0	None	Analysis
Enterprise Key Administrators	Medium	0	0	0	0	None	Analysis
Showing 1 to 10 of 15 rows  rows per page
‹
1
2
›
Critical Infrastructure
If the report has been saved which the full details, each object can be zoomed with its full detail. If it is not the case, for privacy reasons, only general statistics are available.
Search
Group or user account
Priority
Users member
Computer member of the group
Indirect control
Unresolved members
Links
Detail
AdminSDHolder container	Critical			0	0	None	Analysis
Builtin OU	Medium			0	0	None	Analysis
Computers container	Medium			0	0	None	Analysis
Domain Controllers	Critical	0	1 (Details)	0	0	None	Analysis
Domain Root	Medium			0	0	None	Analysis
Enterprise Read Only Domain Controllers	Other	0	0	0	0	None	Analysis
Group Policy Creator Owners	Medium	1 (Details)	0	0	0	None	Analysis
Krbtgt account	Medium			0	0	None	Analysis
Read Only Domain Controllers	Medium	0	0	0	0	None	Analysis
Users container	Medium			0	0	None	Analysis
Showing 1 to 10 of 10 rows
Trusts details
This section focuses on the relations that this domain has with other domains
Discovered Domains
This part displays the direct links that this domain has with other domains.
Search
Trust Partner
Type
Attribut
Direction
SID Filtering active
TGT Delegation
Creation
Is Active ?
Algorithm
No matching records found
Reachable Domains
These are the domains that PingCastle was able to detect but which is not releated to direct trusts. It may be children of a forest or bastions.
Search
Reachable domain
Discovered using
Netbios
Creation date
No matching records found
PKI
Certificates
This detects trusted certificates which can be used in man in the middle attacks, or which can issue smart card logon certificates
Number of trusted certificates: 0
 [0]
Infrastructure
Microsoft Entra Connect settings
Microsoft Entra Connect help maintaining a synchronization between the Active Directory and Entra ID. Microsoft Entra Connect servers should be considered as Tiers0 as they usually have the right to read the hashes of the user passwords.
Search
Identifier
Computer
Tenant
IsEnabled
Created
LastLogon
PwdLastSet
Computer object found
No matching records found
WSUS settings
WSUS settings allow workstations and servers located on the intranet to be updated. The reference documentation is here. Here are the settings found in GPO.
Search
Policy Name
WSUS Server
UseWUServer
ElevateNonAdmins
AUOptions
NoAutoUpdate
NoAutoRebootWithLoggedOnUsers
No matching records found
Exchange settings
Echange is the mail server of Microsoft. Because it is deeply integrated into the Active Directory, it is a component to be monitored
PingCastle is checking objects of type msExchExchangeServer and the schema to provide the information below.
Search
Name
In service date
Version
Proxy
No matching records found
SCCM settings
SCCM or its more recent name Microsoft Endpoint Manager is the Microsoft tool to manage the workstations and servers. It is used typically to deploy packages.
PingCastle is checking objects of type mSSMSManagementPoint and the schema to provide the information below.
Search
Name
Version
Client operational version
AAD TenantID
AAD TenantName
No matching records found
Service Connection Points
Service Connection Points are a configuration stored in the AD to expose services to all computers.
Search
Service
Class
DNS
Binding Info
DN
No matching records found
Replacement of RC4 by AES in kerberos
This section checks for known pain points in AES activation and RC4 removal for kerberos
This feature is reserved for customers who have purchased a license
Anomalies
This section focuses on security checks specific to the Active Directory environment.
Backup
The program checks the last date of the AD backup. This date is computed using the replication metadata of the attribute dsaSignature (reference).


_raw:
Last backup date: 2025-11-05 10:16:36Z
LAPS
LAPS is used to have a unique local administrator password on all workstations / servers of the domain. Then this password is changed at a fixed interval. The risk is when a local administrator hash is retrieved and used on other workstation in a pass-the-hash attack. Please note that the LAPS schema is installed on the forest and as a consequence the installation date can be before the domain creation date.
Mitigation: having a process when a new workstation is created or install LAPS and apply it through a GPO
Legacy LAPS installation date: Never
Ms LAPS installation date: Never
Windows Event Forwarding (WEF)
Windows Event Forwarding is a native mechanism used to collect logs on all workstations / servers of the domain. Microsoft recommends to Use Windows Event Forwarding to help with intrusion detection Here is the list of servers configured for WEF found in GPO
Number of WEF configuration found: 0
krbtgt (Used for Golden ticket attacks)
The account password for the krbtgt account should be rotated twice yearly at a minimum. More frequent password rotations are recommended, with 40 days the current recommendation by ANSSI. Additional rotations based on external events, such as departure of an employee who had privileged network access, are also strongly recommended.
You can perform this action using this script
You can use the version gathered using replication metadata from two reports to guess the frequency of the password change or if the two consecutive resets have been done. Version starts at 1.


_raw: You can use the version gathered using replication metadata from two reports to guess the frequency of the password change or if the two consecutive resets have been done. Version starts at 1.


_raw: You can perform this action using this script


_raw: The account password for the krbtgt account should be rotated twice yearly at a minimum. More frequent password rotations are recommended, with 40 days the current recommendation by ANSSI. Additional rotations based on external events, such as departure of an employee who had privileged network access, are also strongly recommended.


_raw: <!-- SubSection krbtgt (Used for Golden ticket attacks) end -->


_raw: Here is the list of servers configured for WEF found in GPO</p>


_raw: Microsoft recommends to Use Windows Event Forwarding to help with intrusion detection


_raw: <p>Windows Event Forwarding is a native mechanism used to collect logs on all workstations / servers of the domain.


_raw: <!-- SubSection Windows Event Forwarding (WEF) end -->


_raw: <!-- SubSection Windows Event Forwarding (WEF) -->


_raw: Mitigation: having a process when a new workstation is created or install LAPS and apply it through a GPO


_raw: Please note that the LAPS schema is installed on the forest and as a consequence the installation date can be before the domain creation date.</p>


_raw: Then this password is changed at a fixed interval. The risk is when a local administrator hash is retrieved and used on other workstation in a pass-the-hash attack.


_raw: LAPS is used to have a unique local administrator password on all workstations / servers of the domain.


_raw:
Kerberos password last changed: 2025-11-05 09:16:25Z version: 2
AdminSDHolder (detect temporary elevated accounts)
This control detects accounts which are former 'unofficial' admins. Indeed when an account belongs to a privileged group, the attribute admincount is set. If the attribute is set without being an official member, this is suspicious. To suppress this warning, the attribute admincount of these accounts should be removed after review.
Number of accounts to review: 0
Unix Passwords
This control detects if one of the attributes userPassword or unixUserPassword has been set on accounts. Indeed, these attributes are designed to store encrypted secrets for unix (or mainframe) interconnection. However in the large majority, interconnected systems are poorly designed and the user password is stored in these attributes in clear text or poorly encrypted. The userPassword attribute is also used in classic LDAP systems to change the user password by setting its value. But, with Active Directory, it is considered by default as a normal attribute and doesn't trigger a password but shows instead the password in clear text.
Number of accounts to review: 0
Java code reference
This control detects if one of the attributes javaCodebase, javaFactory or javaClassname has been set on accounts. Indeed, these attributes are designed to add custom code to AD object when running java code. However it can be abused to run code on servers having the flag com.sun.jndi.ldap.object.trustURLCodebase set to true. This is a vulnerability similar to the log4shell vulnerability.
Java Schema extension: Not Found
No active user account found with Java code
Logon scripts
You can check here for backdoors or typos in the scriptPath attribute
Search
Script Name
Count
None	2854
Showing 1 to 1 of 1 rows
Advanced
This section display advanced information, if any has been found
Password Policies
Password policies
Note: PSO (Password Settings Objects) will be visible only if the user, which collected the information, has the permission to view it.
PSO shown in the report will be prefixed by "PSO:"
Search
Policy Name
Complexity
Max Password Age
Min Password Age
Min Password Length
Password History
Reversible Encryption
Lockout Threshold
Lockout Duration
Reset account counter locker after
Default Domain Policy 	True	60 day(s)	0 day	5	0	True	10	Infinite	Infinite
Showing 1 to 1 of 1 rows
Screensaver policies
This is the settings related to screensavers stored in Group Policies. Each non compliant setting is written in red.
Search
Policy Name
Screensaver enforced
Password request
Start after (seconds)
Grace Period (seconds)
No matching records found
GPO
This section focuses on security settings stored in the Active Directory technical security policies.
Obfuscated Passwords
The password in GPO are obfuscated, not encrypted. Consider any passwords listed here as compromised and change them immediately.
Restricted Groups
Giving local group membership in a GPO is a way to become administrator.
The local admin of a domain controller can become domain administrator instantly.
Security settings
A GPO can be used to deploy security settings to workstations.
The best practice out of the default security baseline is reported in green.
The following settings in red are unsual and may need to be reviewed.
Each setting is accompanied with its value and a link to the GPO explanation.
You will find below the checks where no occurences have been found
Search
Policy Name
Setting
Value
No matching records found
Audit settings
Audit settings allow the system to generate logs which are useful to detect intrusions. Here are the settings found in GPO.
Simple audit events are described here and Advanced audit events are described here
You can get a list of all audit settings with the command line: auditpol.exe /get /category:* (source)
Simple audit settings are located in: Computer Configuration / Policies / Windows Settings / Security Settings / Local Policies / Audit Policy. Simple audit settings are named [Simple Audit].
Advanced audit settings are located in: Computer Configuration / Policies / Windows Settings / Security Settings / Advanced Audit Policy Configuration. This category is displayed below.
Search
Policy Name
Category
Setting
Value
No matching records found
Privileges
Giving privileges in a GPO is a way to become administrator without being part of a group.
For example, SeTcbPriviledge gives the right to act as SYSTEM, which has more privileges than the administrator account.
Search
GPO Name
Privilege
Members
Default Domain Controllers Policy 	SeAssignPrimaryTokenPrivilege	NT AUTHORITY\NETWORK SERVICE
Default Domain Controllers Policy 	SeAssignPrimaryTokenPrivilege	NT AUTHORITY\LOCAL SERVICE
Default Domain Controllers Policy 	SeBackupPrivilege	BUILTIN\Server Operators
Default Domain Controllers Policy 	SeBackupPrivilege	BUILTIN\Backup Operators
Default Domain Controllers Policy 	SeBackupPrivilege	Administrators
Default Domain Controllers Policy 	SeDebugPrivilege	Users
Default Domain Controllers Policy 	SeDebugPrivilege	Administrators
Default Domain Controllers Policy 	SeLoadDriverPrivilege	BUILTIN\Print Operators
Default Domain Controllers Policy 	SeLoadDriverPrivilege	Administrators
Default Domain Controllers Policy 	SeMachineAccountPrivilege	Authenticated Users
Showing 1 to 10 of 16 rows  rows per page
‹
1
2
›
Login
Login authorization and restriction can be set by GPOs. Indeed, by default, everyone is allowed to login on every computer except domain controllers. Defining login restriction is a way to have different isolated tiers. Here are the settings found in GPOs.
Search
GPO Name
Privilege
Members
Default Domain Controllers Policy 	Log on as a batch job 	BUILTIN\IIS_IUSRS
Default Domain Controllers Policy 	Log on as a batch job 	BUILTIN\Performance Log Users
Default Domain Controllers Policy 	Log on as a batch job 	BUILTIN\Backup Operators
Default Domain Controllers Policy 	Log on as a batch job 	Administrators
Default Domain Controllers Policy 	Allow log on locally 	NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS
Default Domain Controllers Policy 	Allow log on locally 	BUILTIN\Print Operators
Default Domain Controllers Policy 	Allow log on locally 	BUILTIN\Server Operators
Default Domain Controllers Policy 	Allow log on locally 	BUILTIN\Account Operators
Default Domain Controllers Policy 	Allow log on locally 	BUILTIN\Backup Operators
Default Domain Controllers Policy 	Allow log on locally 	Administrators
Showing 1 to 10 of 16 rows  rows per page
‹
1
2
›
GPO Login script
A GPO login script is a way to force the execution of data on behalf of users. Only enabled users are analyzed.
GPO Deployed Files
A GPO can be used to deploy applications or copy files. These files may be controlled by a third party to control the execution of local programs.
Folder Options
File associations may be managed through Group Policy Objects (GPO) by navigating to "Folder Options". This setting is located under Computer Configuration / Preferences / Control Panel Settings / Folders Options in the GPO.
This method serves as an effective countermeasure against script execution from phishing emails by setting Notepad as the default program for opening script files, rather than the script engine. The script extensions that can be reconfigured include: .js, .jse, .vbs, .vbe, .vb, .wsh, and .wsf. Specifically, JavaScript files with extensions .js and .jse can be safely altered to open with Notepad. Other file extensions may have an impact and needs to be assessed before being configured.
Search
GPO Name
Type
Action
Application
No matching records found
Microsoft Defender ASR (attack surface reduction)
Microsoft Defender is the default Antivirus shipped with Windows. There are many alternatives, but if a computer is installed without an antivirus, it will be enabled by default.
A set of mitigation named ASR (attack surface reduction) can be enabled, even on non premium version of Windows Defender. Some protections are available since Windows 10 1710 and even Windows 2012 R2. See https://learn.microsoft.com/en-us/defender-endpoint/attack-surface-reduction-rules-reference?view=o365-worldwide for more information.
To enable a mitigation, enable the GPO "Configure Attack Surface Redurction rules" in Computer Configuration / Policies / Administrative Templates / Windows Components / Windows Defender Antivirus / Windows Defender Exploit Guard / Attack Surface Reduction. After having Enabled the setting, click on Set the state for each ASR rule. Add the GUID of the mitigation as Value name and set 1 as Value to enforce the Block mode. Example for Block JavaScript or VBScript from launching downloaded executable content: d3e037e1-3eb8-44c8-a917-57927947596d. The other values are: 2 for Audit and 6 for Warn.
Search
GPO Name
Rule
Description
Action
No matching records found
Firewall configuration
Firewall rules may be managed through Group Policy Objects (GPO). This setting is located under Computer Configuration / Policies Windows Settings / Security Settings / Windows Defender Firewall with Advanced Security.
Search
GPO Name
Name
Active
Direction
Action
Application
Remote IP
No matching records found


_raw: var modalDialog = new bootstrap.Modal(document.getElementById('hash'));


_raw: if(hash != '' && hash.startsWith('mcg-') ){


_raw: var hash = location.hash.replace('#','');


_raw: document.addEventListener('DOMContentLoaded', function () {


_raw: // Remove the # from the hash, as different browsers may or may not include it


_raw: $("[id^='mcg-']").on('hide.bs.modal', function (event) {


_raw: if(document.getElementById('mynetwork' + id).childNodes.length != 0)


_raw: var id = event.target.id.substring('mcg-'.length);


_raw: $("[id^='mcg-']").on('shown.bs.modal', function (event) {


_raw: var id = event.target.id.substring('switch-'.length + 2);


_raw: progressBar.find('.progress-bar').css('width', percentVal + '%').attr('aria-valuenow', percentVal + '%').text(percentVal + '%');


_raw: network.once('stabilizationIterationsDone', function () {


_raw: var percentVal = 100 * params.iterations / params.total;


_raw: network.on('stabilizationProgress', function (params) {


_raw: network.setOptions( { physics: false } );


_raw: var hierarchical = $('#switch-2-' + id).is(':checked');


_raw: var network = new vis.Network(container, networkData, options);


_raw: iterations: 2000 // try to stabilize the graph in 2000 times, after that show it anyway


_raw: hierarchical: { enabled: true, sortMethod: 'directed', direction: 'LR' }


_raw: //face: 'arial' // maybe use a monospaced font?


_raw: // you can use 'box', 'ellipse', 'circle', 'text' or 'database' here


_raw: var container = document.getElementById('mynetwork' + id);


_raw: color: {color: l.color, highlight: l.color, hover: l.color }


_raw: arrows: l.type === 'double' ? 'to, from' : 'to',


_raw: if (ignoredNode[l.target] !== undefined) {


_raw: if (ignoredNode[l.source] !== undefined) {


_raw: for (var j = 0; j < data.links.length; j++) {


_raw: if (ignoredNode[l.source] !== undefined)


_raw: for (var j= 0; j < data.links.length; j++) {


_raw: color: n['critical'] == 1 ? colors['critical'] :(n['suspicious'] == 1 ? colors['suspicious'] : (n['type'] in colors ? colors[n['type']] : colors['unknown']))


_raw: shape: null === n['dist'] ? 'box':'ellipse',


_raw: label: (n['type'] in symbols ? symbols[n['type']] : symbols['unknown']),


_raw: if (ignoreContainer && n['id'] != 0 && ignoredClasses.includes(n['type'])) {


_raw: for (var i = 0; i < data.nodes.length; i++) {


_raw: hierarchical = $('#switch-2-' + id).is(':checked');


_raw: ignoreContainer = $('#switch-1-' + id).is(':checked');


_raw: title += relationDescription[item] + '<br>';


_raw: if (relationDescription[item] !== undefined) {


_raw: var ignoredClasses = ['organizationalunit', 'container', 'domaindns', 'builtindomain'];


_raw: unknown: { background: "#ffffff", border: "#a352cc", highlight: { background: "#ffffff", border: "#a352cc" } },


_raw: file: { background: "#e680ff", border: "#8e00b2", highlight: { background: "#e680ff", border: "#8e00b2" } },


_raw: gpodirectory: { background: "#e680ff", border: "#8e00b2", highlight: { background: "#e680ff", border: "#8e00b2" } },


_raw: grouppolicycontainer: { background: "#ad8533", border: "#403100", highlight: { background: "#ad8533", border: "#403100" } },


_raw: builtindomain: { background: "#cccccc", border: "#333333", highlight: { background: "#cccccc", border: "#333333" } },


_raw: domaindns: { background: "#cccccc", border: "#333333", highlight: { background: "#cccccc", border: "#333333" } },


_raw: certificationauthority: { background: "#cccccc", border: "#333333", highlight: { background: "#cccccc", border: "#333333" } },


_raw: configuration: { background: "#cccccc", border: "#333333", highlight: { background: "#cccccc", border: "#333333" } },


_raw: container: { background: "#cccccc", border: "#333333", highlight: { background: "#cccccc", border: "#333333" } },


_raw: organizationalunit: { background: "#cccccc", border: "#333333", highlight: { background: "#cccccc", border: "#333333" } },


_raw: group: { background: "#70db70", border: "#196419", highlight: { background: "#70db70", border: "#196419" } },


_raw: computer: { background: "#d65c33", border: "#661a00", highlight: { background: "#d65c33", border: "#661a00" } },


_raw: foreignsecurityprincipal: { background: "#ffa366", border: "#8f3900", highlight: { background: "#ffa366", border: "#8f3900" } },


_raw: inetorgperson: { background: "#80b2ff", border: "#0047b2", highlight: { background: "#80b2ff", border: "#0047b2" } },


_raw: user: { background: "#80b2ff", border: "#0047b2", highlight: { background: "#80b2ff", border: "#0047b2" } },


_raw: critical: { background: "#f12828", border: "#f12828", highlight: { background: "#f12828", border: "#f12828" } },


_raw: suspicious: { background: "#ff6a00", border: "#f12828", highlight: { background: "#ff6a00", border: "#f12828" } },


_raw: 'default': { background: "#CCCCCC", border: "#212121", highlight: { background: "#CCCCCC", border: "#212121" } },


_raw: !function(o,s,r,a){function d(e,t,i){return setTimeout(f(e,i),t)}function h(e,t,i){return!!Array.isArray(e)&&(l(e,i[t],i),!0)}function l(e,t,i){var n;if(e)if(e.forEach)e.forEach(t,i);else if(e.length!==a)for(n=0;n<e.length;)t.call(i,e[n],n,e),n++;else for(n in e)e.hasOwnProperty(n)&&t.call(i,e[n],n,e)}function u(e,t,i){var n="DEPRECATED METHOD: "+t+"\n"+i+" AT \n";return function(){var t=new Error("get-stack-trace"),i=t&&t.stack?t.stack.replace(/^[^\(]+?[\n$]/gm,"").replace(/^\s+at\s+/gm,"").replace(/^Object.<anonymous>\s*\(/gm,"{anonymous}()@"):"Unknown Stack Trace",s=o.console&&(o.console.warn||o.console.log);return s&&s.call(o.console,n,i),e.apply(this,arguments)}}function c(e,t,i){var n,o=t.prototype;n=e.prototype=Object.create(o),n.constructor=e,n._super=o,i&&pe(n,i)}function f(e,t){return function(){return e.apply(t,arguments)}}function p(e,t){return typeof e==ye?e.apply(t?t[0]||a:a,t):e}function v(e,t){return e===a?t:e}function g(e,t,i){l(_(t),function(t){e.addEventListener(t,i,!1)})}function y(e,t,i){l(_(t),function(t){e.removeEventListener(t,i,!1)})}function m(e,t){for(;e;){if(e==t)return!0;e=e.parentNode}return!1}function b(e,t){return e.indexOf(t)>-1}function _(e){return e.trim().split(/\s+/g)}function w(e,t,i){if(e.indexOf&&!i)return e.indexOf(t);for(var n=0;n<e.length;){if(i&&e[n][i]==t||!i&&e[n]===t)return n;n++}return-1}function k(e){return Array.prototype.slice.call(e,0)}function x(e,t,i){for(var n=[],o=[],s=0;s<e.length;){var r=t?e[s][t]:e[s];w(o,r)<0&&n.push(e[s]),o[s]=r,s++}return i&&(n=t?n.sort(function(e,i){return e[t]>i[t]}):n.sort()),n}function O(e,t){for(var i,n,o=t[0].toUpperCase()+t.slice(1),s=0;s<ve.length;){if(i=ve[s],(n=i?i+o:t)in e)return n;s++}return a}function M(){return xe++}function E(e){var t=e.ownerDocument||e;return t.defaultView||t.parentWindow||o}function S(e,t){var i=this;this.manager=e,this.callback=t,this.element=e.element,this.target=e.options.inputTarget,this.domHandler=function(t){p(e.options.enable,[e])&&i.handler(t)},this.init()}function D(e){var t=e.options.inputClass;return new(t||(Ee?W:Se?U:Me?G:H))(e,C)}function C(e,t,i){var n=i.pointers.length,o=i.changedPointers.length,s=t&Ce&&n-o==0,r=t&(Pe|Ie)&&n-o==0;i.isFirst=!!s,i.isFinal=!!r,s&&(e.session={}),i.eventType=t,T(e,i),e.emit("hammer.input",i),e.recognize(i),e.session.prevInput=i}function T(e,t){var i=e.session,n=t.pointers,o=n.length;i.firstInput||(i.firstInput=F(t)),o>1&&!i.firstMultiple?i.firstMultiple=F(t):1===o&&(i.firstMultiple=!1);var s=i.firstInput,r=i.firstMultiple,a=r?r.center:s.center,d=t.center=N(n);t.timeStamp=_e(),t.deltaTime=t.timeStamp-s.timeStamp,t.angle=A(a,d),t.distance=R(a,d),P(i,t),t.offsetDirection=z(t.deltaX,t.deltaY);var h=B(t.deltaTime,t.deltaX,t.deltaY);t.overallVelocityX=h.x,t.overallVelocityY=h.y,t.overallVelocity=be(h.x)>be(h.y)?h.x:h.y,t.scale=r?L(r.pointers,n):1,t.rotation=r?j(r.pointers,n):0,t.maxPointers=i.prevInput?t.pointers.length>i.prevInput.maxPointers?t.pointers.length:i.prevInput.maxPointers:t.pointers.length,I(i,t);var l=e.element;m(t.srcEvent.target,l)&&(l=t.srcEvent.target),t.target=l}function P(e,t){var i=t.center,n=e.offsetDelta||{},o=e.prevDelta||{},s=e.prevInput||{};t.eventType!==Ce&&s.eventType!==Pe||(o=e.prevDelta={x:s.deltaX||0,y:s.deltaY||0},n=e.offsetDelta={x:i.x,y:i.y}),t.deltaX=o.x+(i.x-n.x),t.deltaY=o.y+(i.y-n.y)}function I(e,t){var i,n,o,s,r=e.lastInterval||t,d=t.timeStamp-r.timeStamp;if(t.eventType!=Ie&&(d>De||r.velocity===a)){var h=t.deltaX-r.deltaX,l=t.deltaY-r.deltaY,u=B(d,h,l);n=u.x,o=u.y,i=be(u.x)>be(u.y)?u.x:u.y,s=z(h,l),e.lastInterval=t}else i=r.velocity,n=r.velocityX,o=r.velocityY,s=r.direction;t.velocity=i,t.velocityX=n,t.velocityY=o,t.direction=s}function F(e){for(var t=[],i=0;i<e.pointers.length;)t[i]={clientX:me(e.pointers[i].clientX),clientY:me(e.pointers[i].clientY)},i++;return{timeStamp:_e(),pointers:t,center:N(t),deltaX:e.deltaX,deltaY:e.deltaY}}function N(e){var t=e.length;if(1===t)return{x:me(e[0].clientX),y:me(e[0].clientY)};for(var i=0,n=0,o=0;o<t;)i+=e[o].clientX,n+=e[o].clientY,o++;return{x:me(i/t),y:me(n/t)}}function B(e,t,i){return{x:t/e||0,y:i/e||0}}function z(e,t){return e===t?Fe:be(e)>=be(t)?e<0?Ne:Be:t<0?ze:Re}function R(e,t,i){i||(i=He);var n=t[i[0]]-e[i[0]],o=t[i[1]]-e[i[1]];return Math.sqrt(n*n+o*o)}function A(e,t,i){i||(i=He);var n=t[i[0]]-e[i[0]],o=t[i[1]]-e[i[1]];return 180*Math.atan2(o,n)/Math.PI}function j(e,t){return A(t[1],t[0],We)+A(e[1],e[0],We)}function L(e,t){return R(t[0],t[1],We)/R(e[0],e[1],We)}function H(){this.evEl=Ve,this.evWin=Ue,this.pressed=!1,S.apply(this,arguments)}function W(){this.evEl=Xe,this.evWin=Ke,S.apply(this,arguments),this.store=this.manager.session.pointerEvents=[]}function Y(){this.evTarget=$e,this.evWin=Qe,this.started=!1,S.apply(this,arguments)}function V(e,t){var i=k(e.touches),n=k(e.changedTouches);return t&(Pe|Ie)&&(i=x(i.concat(n),"identifier",!0)),[i,n]}function U(){this.evTarget=et,this.targetIds={},S.apply(this,arguments)}function q(e,t){var i=k(e.touches),n=this.targetIds;if(t&(Ce|Te)&&1===i.length)return n[i[0].identifier]=!0,[i,i];var o,s,r=k(e.changedTouches),a=[],d=this.target;if(s=i.filter(function(e){return m(e.target,d)}),t===Ce)for(o=0;o<s.length;)n[s[o].identifier]=!0,o++;for(o=0;o<r.length;)n[r[o].identifier]&&a.push(r[o]),t&(Pe|Ie)&&delete n[r[o].identifier],o++;return a.length?[x(s.concat(a),"identifier",!0),a]:void 0}function G(){S.apply(this,arguments);var e=f(this.handler,this);this.touch=new U(this.manager,e),this.mouse=new H(this.manager,e),this.primaryTouch=null,this.lastTouches=[]}function X(e,t){e&Ce?(this.primaryTouch=t.changedPointers[0].identifier,K.call(this,t)):e&(Pe|Ie)&&K.call(this,t)}function K(e){var t=e.changedPointers[0];if(t.identifier===this.primaryTouch){var i={x:t.clientX,y:t.clientY};this.lastTouches.push(i);var n=this.lastTouches,o=function(){var e=n.indexOf(i);e>-1&&n.splice(e,1)};setTimeout(o,tt)}}function Z(e){for(var t=e.srcEvent.clientX,i=e.srcEvent.clientY,n=0;n<this.lastTouches.length;n++){var o=this.lastTouches[n],s=Math.abs(t-o.x),r=Math.abs(i-o.y);if(s<=it&&r<=it)return!0}return!1}function $(e,t){this.manager=e,this.set(t)}function Q(e){if(b(e,at))return at;var t=b(e,dt),i=b(e,ht);return t&&i?at:t||i?t?dt:ht:b(e,rt)?rt:st}function J(e){this.options=pe({},this.defaults,e||{}),this.id=M(),this.manager=null,this.options.enable=v(this.options.enable,!0),this.state=ut,this.simultaneous={},this.requireFail=[]}function ee(e){return e&gt?"cancel":e&pt?"end":e&ft?"move":e&ct?"start":""}function te(e){return e==Re?"down":e==ze?"up":e==Ne?"left":e==Be?"right":""}function ie(e,t){var i=t.manager;return i?i.get(e):e}function ne(){J.apply(this,arguments)}function oe(){ne.apply(this,arguments),this.pX=null,this.pY=null}function se(){ne.apply(this,arguments)}function re(){J.apply(this,arguments),this._timer=null,this._input=null}function ae(){ne.apply(this,arguments)}function de(){ne.apply(this,arguments)}function he(){J.apply(this,arguments),this.pTime=!1,this.pCenter=!1,this._timer=null,this._input=null,this.count=0}function le(e,t){return t=t||{},t.recognizers=v(t.recognizers,le.defaults.preset),new ue(e,t)}function ue(e,t){this.options=pe({},le.defaults,t||{}),this.options.inputTarget=this.options.inputTarget||e,this.handlers={},this.session={},this.recognizers=[],this.oldCssProps={},this.element=e,this.input=D(this),this.touchAction=new $(this,this.options.touchAction),ce(this,!0),l(this.options.recognizers,function(e){var t=this.add(new e[0](e[1]));e[2]&&t.recognizeWith(e[2]),e[3]&&t.requireFailure(e[3])},this)}function ce(e,t){var i=e.element;if(i.style){var n;l(e.options.cssProps,function(o,s){n=O(i.style,s),t?(e.oldCssProps[n]=i.style[n],i.style[n]=o):i.style[n]=e.oldCssProps[n]||""}),t||(e.oldCssProps={})}}function fe(e,t){var i=s.createEvent("Event");i.initEvent(e,!0,!0),i.gesture=t,t.target.dispatchEvent(i)}var pe,ve=["","webkit","Moz","MS","ms","o"],ge=s.createElement("div"),ye="function",me=Math.round,be=Math.abs,_e=Date.now;pe="function"!=typeof Object.assign?function(e){if(e===a||null===e)throw new TypeError("Cannot convert undefined or null to object");for(var t=Object(e),i=1;i<arguments.length;i++){var n=arguments[i];if(n!==a&&null!==n)for(var o in n)n.hasOwnProperty(o)&&(t[o]=n[o])}return t}:Object.assign;var we=u(function(e,t,i){for(var n=Object.keys(t),o=0;o<n.length;)(!i||i&&e[n[o]]===a)&&(e[n[o]]=t[n[o]]),o++;return e},"extend","Use `assign`."),ke=u(function(e,t){return we(e,t,!0)},"merge","Use `assign`."),xe=1,Oe=/mobile|tablet|ip(ad|hone|od)|android/i,Me="ontouchstart"in o,Ee=O(o,"PointerEvent")!==a,Se=Me&&Oe.test(navigator.userAgent),De=25,Ce=1,Te=2,Pe=4,Ie=8,Fe=1,Ne=2,Be=4,ze=8,Re=16,Ae=Ne|Be,je=ze|Re,Le=Ae|je,He=["x","y"],We=["clientX","clientY"];S.prototype={handler:function(){},init:function(){this.evEl&&g(this.element,this.evEl,this.domHandler),this.evTarget&&g(this.target,this.evTarget,this.domHandler),this.evWin&&g(E(this.element),this.evWin,this.domHandler)},destroy:function(){this.evEl&&y(this.element,this.evEl,this.domHandler),this.evTarget&&y(this.target,this.evTarget,this.domHandler),this.evWin&&y(E(this.element),this.evWin,this.domHandler)}};var Ye={mousedown:Ce,mousemove:Te,mouseup:Pe},Ve="mousedown",Ue="mousemove mouseup";c(H,S,{handler:function(e){var t=Ye[e.type];t&Ce&&0===e.button&&(this.pressed=!0),t&Te&&1!==e.which&&(t=Pe),this.pressed&&(t&Pe&&(this.pressed=!1),this.callback(this.manager,t,{pointers:[e],changedPointers:[e],pointerType:"mouse",srcEvent:e}))}});var qe={pointerdown:Ce,pointermove:Te,pointerup:Pe,pointercancel:Ie,pointerout:Ie},Ge={2:"touch",3:"pen",4:"mouse",5:"kinect"},Xe="pointerdown",Ke="pointermove pointerup pointercancel";o.MSPointerEvent&&!o.PointerEvent&&(Xe="MSPointerDown",Ke="MSPointerMove MSPointerUp MSPointerCancel"),c(W,S,{handler:function(e){var t=this.store,i=!1,n=e.type.toLowerCase().replace("ms",""),o=qe[n],s=Ge[e.pointerType]||e.pointerType,r="touch"==s,a=w(t,e.pointerId,"pointerId");o&Ce&&(0===e.button||r)?a<0&&(t.push(e),a=t.length-1):o&(Pe|Ie)&&(i=!0),a<0||(t[a]=e,this


_raw: "use strict";!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.vis=t():e.vis=t()}(this,function(){return function(e){function t(n){if(i[n])return i[n].exports;var o=i[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,t),o.l=!0,o.exports}var i={};return t.m=e,t.c=i,t.d=function(e,i,n){t.o(e,i)||Object.defineProperty(e,i,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var i=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(i,"a",i),i},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="",t(t.s=83)}([function(e,t,i){t.__esModule=!0,t.default=function(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}},function(e,t,i){t.__esModule=!0;var n=i(127),o=function(e){return e&&e.__esModule?e:{default:e}}(n);t.default=function(){function e(e,t){for(var i=0;i<t.length;i++){var n=t[i];n.enumerable=n.enumerable||!1,n.configurable=!0,"value"in n&&(n.writable=!0),(0,o.default)(e,n.key,n)}}return function(t,i,n){return i&&e(t.prototype,i),n&&e(t,n),t}}()},function(e,t,i){e.exports={default:i(143),__esModule:!0}},function(e,t,i){t.__esModule=!0;var n=i(7),o=function(e){return e&&e.__esModule?e:{default:e}}(n);t.default=function(e,t){if(!e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return!t||"object"!==(void 0===t?"undefined":(0,o.default)(t))&&"function"!=typeof t?e:t}},function(e,t,i){function n(e){return e&&e.__esModule?e:{default:e}}t.__esModule=!0;var o=i(145),s=n(o),r=i(30),a=n(r),d=i(7),h=n(d);t.default=function(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Super expression must either be null or a function, not "+(void 0===t?"undefined":(0,h.default)(t)));e.prototype=(0,a.default)(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(s.default?(0,s.default)(e,t):e.__proto__=t)}},function(e,t,i){function n(e){return e&&e.__esModule?e:{default:e}}function o(e,t,i,n){var o=!1;!0===n&&(o=null===t[i]&&void 0!==e[i]),o?delete e[i]:e[i]=t[i]}var s=i(58),r=n(s),a=i(30),d=n(a),h=i(10),l=n(h),u=i(7),c=n(u),f=i(71),p=i(117);t.isNumber=function(e){return e instanceof Number||"number"==typeof e},t.recursiveDOMDelete=function(e){if(e)for(;!0===e.hasChildNodes();)t.recursiveDOMDelete(e.firstChild),e.removeChild(e.firstChild)},t.giveRange=function(e,t,i,n){if(t==e)return.5;var o=1/(t-e);return Math.max(0,(n-e)*o)},t.isString=function(e){return e instanceof String||"string"==typeof e},t.isDate=function(e){if(e instanceof Date)return!0;if(t.isString(e)){if(v.exec(e))return!0;if(!isNaN(Date.parse(e)))return!0}return!1},t.randomUUID=function(){return p.v4()},t.assignAllKeys=function(e,t){for(var i in e)e.hasOwnProperty(i)&&"object"!==(0,c.default)(e[i])&&(e[i]=t)},t.fillIfDefined=function(e,i){var n=arguments.length>2&&void 0!==arguments[2]&&arguments[2];for(var s in e)void 0!==i[s]&&(null===i[s]||"object"!==(0,c.default)(i[s])?o(e,i,s,n):"object"===(0,c.default)(e[s])&&t.fillIfDefined(e[s],i[s],n))},t.extend=function(e,t){for(var i=1;i<arguments.length;i++){var n=arguments[i];for(var o in n)n.hasOwnProperty(o)&&(e[o]=n[o])}return e},t.selectiveExtend=function(e,t,i){if(!Array.isArray(e))throw new Error("Array with property names expected as first argument");for(var n=2;n<arguments.length;n++)for(var o=arguments[n],s=0;s<e.length;s++){var r=e[s];o&&o.hasOwnProperty(r)&&(t[r]=o[r])}return t},t.selectiveDeepExtend=function(e,i,n){var s=arguments.length>3&&void 0!==arguments[3]&&arguments[3];if(Array.isArray(n))throw new TypeError("Arrays are not supported by deepExtend");for(var r=0;r<e.length;r++){var a=e[r];if(n.hasOwnProperty(a))if(n[a]&&n[a].constructor===Object)void 0===i[a]&&(i[a]={}),i[a].constructor===Object?t.deepExtend(i[a],n[a],!1,s):o(i,n,a,s);else{if(Array.isArray(n[a]))throw new TypeError("Arrays are not supported by deepExtend");o(i,n,a,s)}}return i},t.selectiveNotDeepExtend=function(e,i,n){var s=arguments.length>3&&void 0!==arguments[3]&&arguments[3];if(Array.isArray(n))throw new TypeError("Arrays are not supported by deepExtend");for(var r in n)if(n.hasOwnProperty(r)&&-1===e.indexOf(r))if(n[r]&&n[r].constructor===Object)void 0===i[r]&&(i[r]={}),i[r].constructor===Object?t.deepExtend(i[r],n[r]):o(i,n,r,s);else if(Array.isArray(n[r])){i[r]=[];for(var a=0;a<n[r].length;a++)i[r].push(n[r][a])}else o(i,n,r,s);return i},t.deepExtend=function(e,i){var n=arguments.length>2&&void 0!==arguments[2]&&arguments[2],s=arguments.length>3&&void 0!==arguments[3]&&arguments[3];for(var r in i)if(i.hasOwnProperty(r)||!0===n)if(i[r]&&i[r].constructor===Object)void 0===e[r]&&(e[r]={}),e[r].constructor===Object?t.deepExtend(e[r],i[r],n):o(e,i,r,s);else if(Array.isArray(i[r])){e[r]=[];for(var a=0;a<i[r].length;a++)e[r].push(i[r][a])}else o(e,i,r,s);return e},t.equalArray=function(e,t){if(e.length!=t.length)return!1;for(var i=0,n=e.length;i<n;i++)if(e[i]!=t[i])return!1;return!0},t.convert=function(e,i){var n;if(void 0!==e){if(null===e)return null;if(!i)return e;if("string"!=typeof i&&!(i instanceof String))throw new Error("Type must be a string");switch(i){case"boolean":case"Boolean":return Boolean(e);case"number":case"Number":return t.isString(e)&&!isNaN(Date.parse(e))?f(e).valueOf():Number(e.valueOf());case"string":case"String":return String(e);case"Date":if(t.isNumber(e))return new Date(e);if(e instanceof Date)return new Date(e.valueOf());if(f.isMoment(e))return new Date(e.valueOf());if(t.isString(e))return n=v.exec(e),n?new Date(Number(n[1])):f(new Date(e)).toDate();throw new Error("Cannot convert object of type "+t.getType(e)+" to type Date");case"Moment":if(t.isNumber(e))return f(e);if(e instanceof Date)return f(e.valueOf());if(f.isMoment(e))return f(e);if(t.isString(e))return n=v.exec(e),f(n?Number(n[1]):e);throw new Error("Cannot convert object of type "+t.getType(e)+" to type Date");case"ISODate":if(t.isNumber(e))return new Date(e);if(e instanceof Date)return e.toISOString();if(f.isMoment(e))return e.toDate().toISOString();if(t.isString(e))return n=v.exec(e),n?new Date(Number(n[1])).toISOString():f(e).format();throw new Error("Cannot convert object of type "+t.getType(e)+" to type ISODate");case"ASPDate":if(t.isNumber(e))return"/Date("+e+")/";if(e instanceof Date)return"/Date("+e.valueOf()+")/";if(t.isString(e)){n=v.exec(e);return"/Date("+(n?new Date(Number(n[1])).valueOf():new Date(e).valueOf())+")/"}throw new Error("Cannot convert object of type "+t.getType(e)+" to type ASPDate");default:throw new Error('Unknown type "'+i+'"')}}};var v=/^\/?Date\((\-?\d+)/i;t.getType=function(e){var t=void 0===e?"undefined":(0,c.default)(e);return"object"==t?null===e?"null":e instanceof Boolean?"Boolean":e instanceof Number?"Number":e instanceof String?"String":Array.isArray(e)?"Array":e instanceof Date?"Date":"Object":"number"==t?"Number":"boolean"==t?"Boolean":"string"==t?"String":void 0===t?"undefined":t},t.copyAndExtendArray=function(e,t){for(var i=[],n=0;n<e.length;n++)i.push(e[n]);return i.push(t),i},t.copyArray=function(e){for(var t=[],i=0;i<e.length;i++)t.push(e[i]);return t},t.getAbsoluteLeft=function(e){return e.getBoundingClientRect().left},t.getAbsoluteRight=function(e){return e.getBoundingClientRect().right},t.getAbsoluteTop=function(e){return e.getBoundingClientRect().top},t.addClassName=function(e,t){var i=e.className.split(" "),n=t.split(" ");i=i.concat(n.filter(function(e){return i.indexOf(e)<0})),e.className=i.join(" ")},t.removeClassName=function(e,t){var i=e.className.split(" "),n=t.split(" ");i=i.filter(function(e){return n.indexOf(e)<0}),e.className=i.join(" ")},t.forEach=function(e,t){var i,n;if(Array.isArray(e))for(i=0,n=e.length;i<n;i++)t(e[i],i,e);else for(i in e)e.hasOwnProperty(i)&&t(e[i],i,e)},t.toArray=function(e){var t=[];for(var i in e)e.hasOwnProperty(i)&&t.push(e[i]);return t},t.updateProperty=function(e,t,i){return e[t]!==i&&(e[t]=i,!0)},t.throttle=function(e){var t=!1;return function(){t||(t=!0,requestAnimationFrame(function(){t=!1,e()}))}},t.addEventListener=function(e,t,i,n){e.addEventListener?(void 0===n&&(n=!1),"mousewheel"===t&&navigator.userAgent.indexOf("Firefox")>=0&&(t="DOMMouseScroll"),e.addEventListener(t,i,n)):e.attachEvent("on"+t,i)},t.removeEventListener=function(e,t,i,n){e.removeEventListener?(void 0===n&&(n=!1),"mousewheel"===t&&navigator.userAgent.indexOf("Firefox")>=0&&(t="DOMMouseScroll"),e.removeEventListener(t,i,n)):e.detachEvent("on"+t,i)},t.preventDefault=function(e){e||(e=window.event),e.preventDefault?e.preventDefault():e.returnValue=!1},t.getTarget=function(e){e||(e=window.event);var t;return e.target?t=e.target:e.srcElement&&(t=e.srcElement),void 0!=t.nodeType&&3==t.nodeType&&(t=t.parentNode),t},t.hasParent=function(e,t){for(var i=e;i;){if(i===t)return!0;i=i.parentNode}return!1},t.option={},t.option.asBoolean=function(e,t){return"function"==typeof e&&(e=e()),null!=e?0!=e:t||null},t.option.asNumber=function(e,t){return"function"==typeof e&&(e=e()),null!=e?Number(e)||t||null:t||null},t.option.asString=function(e,t){return"function"==typeof e&&(e=e()),null!=e?String(e):t||null},t.option.asSize=function(e,i){return"function"==typeof e&&(e=e()),t.isString(e)?e:t.isNumber(e)?e+"px":i||null},t.option.asElement=function(e,t){return"function"==typeof e&&(e=e()),e||t||null},t.hexToRGB=function(e){var t=/^#?([a-f\d])([a-f\d])([a-f\d])$/i;e=e.replace(t,function(e,t,i,n){return t+t+i+i+n+n});var i=/^#?([a-f\d]{2})([a-f\d]{2})([a-f\d]{2})$/i.exec(e);return i?{r:parseInt(i[1],16),g:parseInt(i[2],16),b:parseInt(i[3],16)}:null},t.overrideOpacity=function(e,i){var n;return-1!=e.indexOf("rgba")?e:-1!=e.indexOf("rgb")?(n=e.substr(e.indexOf("(")+1).replace(")","").split(","),"rgba("+n[0]+","+n[1]+","+n[2]+","+i+")"):(n=t.hexToRGB(e),null==n?e:"rgba("+n.r+","+n.g+","+n.b+","+i+")")},t.RGBToHex=function(e,t,i){return"#"+((1<<24)+(e<<16)+(t<<8)+i).toString(16).slice(1)},t.parseColor=function(e){var i;if(!0===t.isSt


_raw: * Vis.js may be distributed under either license.


_raw: *   http://www.apache.org/licenses/LICENSE-2.0


_raw: * Copyright (C) 2011-2017 Almende B.V, http://almende.com


_raw: * A dynamic, browser-based visualization library.


_raw: console.error('Couldn t read JSON data from ' + dataSelect, err);


_raw: var data = JSON.parse(inlineJsonElement.textContent);


_raw: 'script[type="application/json"][data-pingcastle-selector="' + dataSelect + '"]'


_raw: var inlineJsonElement = document.querySelector(


_raw: return temporalDivEl.textContent || temporalDivEl.innerText || "";


_raw: // Get the text property of the element (browser support)


_raw: var temporalDivEl = document.createElement("div");


_raw: return (strip(value).indexOf(text) > -1);


_raw: return Object.entries(row).some(([key, value]) => {


_raw: window.addEventListener('afterprint', function () {


_raw: window.addEventListener('beforeprint', function () {


_raw: var tooltipList = tooltipTriggerList.map(function (tooltipTriggerEl) {


_raw: var tooltipTriggerList = [].slice.call(document.querySelectorAll('[data-bs-toggle="tooltip"]'))


_raw: $('.div_model').on('click', function (e) {


_raw: document.addEventListener('DOMContentLoaded', function () {