-
Notifications
You must be signed in to change notification settings - Fork 20
/
sam.yaml
118 lines (118 loc) · 2.24 KB
/
sam.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
# dtFabric format specification.
---
name: sam
type: format
description: Security Accounts Manager (SAM) format
---
name: byte
type: integer
attributes:
format: unsigned
size: 1
units: bytes
---
name: uint16
type: integer
attributes:
format: unsigned
size: 2
units: bytes
---
name: uint32
type: integer
attributes:
format: unsigned
size: 4
units: bytes
---
name: uint64
type: integer
attributes:
format: unsigned
size: 8
units: bytes
---
name: c_value
type: structure
description: Security Accounts Manager C value.
attributes:
byte_order: little-endian
members:
- name: format_version
data_type: uint16
- name: unknown1
data_type: uint16
- name: unknown2
data_type: uint32
- name: security_descriptor_size
data_type: uint32
- name: unknown3
data_type: uint16
- name: unknown4
data_type: uint16
- name: security_descriptor
type: stream
element_data_type: byte
elements_data_size: c_value.security_descriptor_size
---
name: f_value
type: structure
description: Security Accounts Manager F value.
attributes:
byte_order: little-endian
members:
- name: major_version
data_type: uint16
- name: minor_version
data_type: uint16
- name: unknown1
data_type: uint32
- name: last_login_time
data_type: uint64
- name: unknown2
data_type: uint64
- name: last_password_set_time
data_type: uint64
- name: account_expiration_time
data_type: uint64
- name: last_password_failure_time
data_type: uint64
- name: rid
data_type: uint32
- name: primary_gid
data_type: uint32
- name: user_account_control_flags
data_type: uint32
- name: country_code
data_type: uint16
- name: codepage
data_type: uint16
- name: number_of_password_failures
data_type: uint16
- name: number_of_logons
data_type: uint16
- name: unknown6
data_type: uint32
- name: unknown7
data_type: uint32
- name: unknown8
data_type: uint32
---
name: user_information_descriptor
type: structure
description: Security Accounts Manager user information descriptor.
attributes:
byte_order: little-endian
members:
- name: offset
data_type: uint32
- name: size
data_type: uint32
- name: unknown1
data_type: uint32
---
name: v_value
type: sequence
description: Security Accounts Manager V value.
element_data_type: user_information_descriptor
number_of_elements: 17