feat: Add new edges to edge filter

BloodHoundAD · Apr 18, 2023 · 69786fa · 69786fa
1 parent d9bb1a6
commit 69786fa
Show file tree

Hide file tree

Showing 3 changed files with 39 additions and 1 deletion.
diff --git a/src/components/SearchContainer/EdgeFilter/EdgeFilter.jsx b/src/components/SearchContainer/EdgeFilter/EdgeFilter.jsx
@@ -144,6 +144,11 @@ const EdgeFilter = ({ open }) => {
                             'AZAddOwner',
                             'AZManagedIdentity',
                             'AZKeyVaultContributor',
+                            'AZNodeResourceGroup',
+                            'AZWebsiteContributor',
+                            'AZLogicAppContributor',
+                            'AZAutomationContributor',
+                            'AZAKSContributor',
                         ]}
                         sectionName='azure'
                     />
@@ -176,6 +181,29 @@ const EdgeFilter = ({ open }) => {
                     <EdgeFilterCheck name='AZAddOwner' />
                     <EdgeFilterCheck name='AZManagedIdentity' />
                     <EdgeFilterCheck name='AZKeyVaultContributor' />
+                    <EdgeFilterCheck name='AZNodeResourceGroup' />
+                    <EdgeFilterCheck name='AZWebsiteContributor' />
+                    <EdgeFilterCheck name='AZLogicAppContributor' />
+                    <EdgeFilterCheck name='AZAutomationContributor' />
+                    <EdgeFilterCheck name='AZAKSContributor' />
+                </div>
+                <div>
+                    <EdgeFilterSection
+                        title='MS Graph App Roles'
+                        edges={[
+                            'AZMGAddSecret',
+                            'AZMGAddOwner',
+                            'AZMGAddMember',
+                            'AZMGGrantAppRoles',
+                            'AZMGGrantRole',
+                        ]}
+                        sectionName='msgraphapproles'
+                    />
+                    <EdgeFilterCheck name='AZMGAddSecret' />
+                    <EdgeFilterCheck name='AZMGAddOwner' />
+                    <EdgeFilterCheck name='AZMGAddMember' />
+                    <EdgeFilterCheck name='AZMGGrantAppRoles' />
+                    <EdgeFilterCheck name='AZMGGrantRole' />
                 </div>
             </div>
         </motion.div>

diff --git a/src/components/SearchContainer/EdgeFilter/EdgeFilter.module.css b/src/components/SearchContainer/EdgeFilter/EdgeFilter.module.css
@@ -35,7 +35,7 @@
 
 .container {
     display: grid;
-    grid-template-columns: 1fr 1fr;
+    grid-template-columns: 1fr 1fr 1fr;
     margin-left: 8px;
     margin-right: 8px;
     white-space: nowrap;

diff --git a/src/index.js b/src/index.js
@@ -447,6 +447,16 @@ if (typeof conf.get('edgeincluded') === 'undefined') {
         HasSIDHistory: true,
         CanPSRemote: true,
         SyncLAPSPassword: true,
+        AZMGGrantRole: true,
+        AZMGAddSecret: true,
+        AZMGAddOwner: true,
+        AZMGAddMember: true,
+        AZMGGrantAppRoles: true,
+        AZNodeResourceGroup: true,
+        AZWebsiteContributor: true,
+        AZLogicAppContributo: true,
+        AZAutomationContributor: true,
+        AZAKSContributor: true,
     });
 }