Domain Detective

API Reference

Class

CertificateInventoryRiskAnalyzer

Edit on GitHub
Namespace DomainDetective
Assembly DomainDetective
Source DomainDetective/CertificateInventoryRiskAnalyzer.BuildRisk.cs:73
Modifiers static

Computes endpoint-level risk posture from persisted inventory snapshots.

Inheritance

  • Object
  • CertificateInventoryRiskAnalyzer

Methods

public static CertificateInventoryRiskSummary BuildRisk(IEnumerable<CertificateInventorySnapshot> snapshots, Boolean includeNoRisk = false, Int32 expiringWithinDays = 30, Int32 criticalExpiringWithinDays = 7, Int32 maxEndpoints = 300, String minimumSeverity = null, Nullable<Int32> scoreMin = null, Nullable<Int32> scoreMax = null, Nullable<Int32> reasonCountMin = null, Nullable<Int32> reasonCountMax = null, String riskProfile = null, String reasonContains = null, String issuerContains = null, String authorityFamilyEquals = null, String rootAuthorityFamilyEquals = null, String ctSourceContains = null, String ctTemplateErrorContains = null, String chainSourceContains = null, String thumbprintEquals = null, String rootThumbprintEquals = null, String serialNumberEquals = null, String hostContains = null, String serviceEquals = null, Nullable<Int32> portEquals = null, Nullable<Int32> chainLengthMin = null, Nullable<Int32> chainLengthMax = null, Nullable<Int32> intermediateCountMin = null, Nullable<Int32> intermediateCountMax = null, Nullable<Boolean> ctObservedOnly = null, Nullable<Boolean> chainCompleteOnly = null, Nullable<Boolean> reachableOnly = null, Nullable<Boolean> hostnameMatchOnly = null, Nullable<Boolean> selfSignedOnly = null, Nullable<Boolean> weakKeyOnly = null, Nullable<Boolean> sha1SignatureOnly = null, Nullable<Boolean> expiredOnly = null, Nullable<Boolean> notYetValidOnly = null, Nullable<Boolean> currentlyValidOnly = null, Nullable<Int32> daysToExpireMin = null, Nullable<Int32> daysToExpireMax = null, Nullable<Int32> daysUntilValidMin = null, Nullable<Int32> daysUntilValidMax = null, Nullable<Boolean> knownAuthorityOnly = null, Nullable<Boolean> knownRootAuthorityOnly = null, String authenticationProfileEquals = null, Boolean serverAuthOnly = false, Boolean clientAuthOnly = false, Boolean secureEmailOnly = false, String[] reasonAnyOf = null, String[] reasonAllOf = null, String[] issuerContainsAnyOf = null, String[] issuerContainsAllOf = null, String rootIssuerContains = null, String[] rootIssuerContainsAnyOf = null, String[] rootIssuerContainsAllOf = null, Nullable<Int32> certificateReuseEndpointCountMin = null, Nullable<Int32> certificateReuseEndpointCountMax = null, Nullable<Boolean> certificateReuseCrossServiceOnly = null, Nullable<Int32> certificateReuseDistinctServiceCountMin = null, Nullable<Int32> certificateReuseDistinctServiceCountMax = null, Nullable<Int32> certificateReuseDistinctPortCountMin = null, Nullable<Int32> certificateReuseDistinctPortCountMax = null, Nullable<Boolean> certificateReuseCrossPortOnly = null) #
DomainDetective/CertificateInventoryRiskAnalyzer.BuildRisk.cs:73
Returns: CertificateInventoryRiskSummary

Builds risk.

Parameters

snapshots System.Collections.Generic.IEnumerable{DomainDetective.CertificateInventorySnapshot} requiredposition: 0
includeNoRisk System.Boolean = false optionalposition: 1
expiringWithinDays System.Int32 = 30 optionalposition: 2
criticalExpiringWithinDays System.Int32 = 7 optionalposition: 3
maxEndpoints System.Int32 = 300 optionalposition: 4
minimumSeverity System.String = null optionalposition: 5
scoreMin System.Nullable{System.Int32} = null optionalposition: 6
scoreMax System.Nullable{System.Int32} = null optionalposition: 7
reasonCountMin System.Nullable{System.Int32} = null optionalposition: 8
reasonCountMax System.Nullable{System.Int32} = null optionalposition: 9
riskProfile System.String = null optionalposition: 10
reasonContains System.String = null optionalposition: 11
issuerContains System.String = null optionalposition: 12
authorityFamilyEquals System.String = null optionalposition: 13
rootAuthorityFamilyEquals System.String = null optionalposition: 14
ctSourceContains System.String = null optionalposition: 15
ctTemplateErrorContains System.String = null optionalposition: 16
chainSourceContains System.String = null optionalposition: 17
thumbprintEquals System.String = null optionalposition: 18
rootThumbprintEquals System.String = null optionalposition: 19
serialNumberEquals System.String = null optionalposition: 20
hostContains System.String = null optionalposition: 21
serviceEquals System.String = null optionalposition: 22
portEquals System.Nullable{System.Int32} = null optionalposition: 23
chainLengthMin System.Nullable{System.Int32} = null optionalposition: 24
chainLengthMax System.Nullable{System.Int32} = null optionalposition: 25
intermediateCountMin System.Nullable{System.Int32} = null optionalposition: 26
intermediateCountMax System.Nullable{System.Int32} = null optionalposition: 27
ctObservedOnly System.Nullable{System.Boolean} = null optionalposition: 28
chainCompleteOnly System.Nullable{System.Boolean} = null optionalposition: 29
reachableOnly System.Nullable{System.Boolean} = null optionalposition: 30
hostnameMatchOnly System.Nullable{System.Boolean} = null optionalposition: 31
selfSignedOnly System.Nullable{System.Boolean} = null optionalposition: 32
weakKeyOnly System.Nullable{System.Boolean} = null optionalposition: 33
sha1SignatureOnly System.Nullable{System.Boolean} = null optionalposition: 34
expiredOnly System.Nullable{System.Boolean} = null optionalposition: 35
notYetValidOnly System.Nullable{System.Boolean} = null optionalposition: 36
currentlyValidOnly System.Nullable{System.Boolean} = null optionalposition: 37
daysToExpireMin System.Nullable{System.Int32} = null optionalposition: 38
daysToExpireMax System.Nullable{System.Int32} = null optionalposition: 39
daysUntilValidMin System.Nullable{System.Int32} = null optionalposition: 40
daysUntilValidMax System.Nullable{System.Int32} = null optionalposition: 41
knownAuthorityOnly System.Nullable{System.Boolean} = null optionalposition: 42
knownRootAuthorityOnly System.Nullable{System.Boolean} = null optionalposition: 43
authenticationProfileEquals System.String = null optionalposition: 44
serverAuthOnly System.Boolean = false optionalposition: 45
clientAuthOnly System.Boolean = false optionalposition: 46
secureEmailOnly System.Boolean = false optionalposition: 47
reasonAnyOf System.String[] = null optionalposition: 48
reasonAllOf System.String[] = null optionalposition: 49
issuerContainsAnyOf System.String[] = null optionalposition: 50
issuerContainsAllOf System.String[] = null optionalposition: 51
rootIssuerContains System.String = null optionalposition: 52
rootIssuerContainsAnyOf System.String[] = null optionalposition: 53
rootIssuerContainsAllOf System.String[] = null optionalposition: 54
certificateReuseEndpointCountMin System.Nullable{System.Int32} = null optionalposition: 55
certificateReuseEndpointCountMax System.Nullable{System.Int32} = null optionalposition: 56
certificateReuseCrossServiceOnly System.Nullable{System.Boolean} = null optionalposition: 57
certificateReuseDistinctServiceCountMin System.Nullable{System.Int32} = null optionalposition: 58
certificateReuseDistinctServiceCountMax System.Nullable{System.Int32} = null optionalposition: 59
certificateReuseDistinctPortCountMin System.Nullable{System.Int32} = null optionalposition: 60
certificateReuseDistinctPortCountMax System.Nullable{System.Int32} = null optionalposition: 61
certificateReuseCrossPortOnly System.Nullable{System.Boolean} = null optionalposition: 62
public static Boolean TryResolveMinimumSeverity(String severity, out Int32 minimumScore, out String normalizedSeverity) #
DomainDetective/CertificateInventoryRiskAnalyzer.cs:239
Returns: Boolean

Attempts to resolve a severity label to its minimum score threshold. Returns false for null/empty input and unrecognized labels.

Parameters

severity System.String requiredposition: 0
minimumScore System.Int32@ requiredposition: 1
normalizedSeverity System.String@ requiredposition: 2
public static Boolean TryResolveRiskProfile(String riskProfile, out String normalizedRiskProfile) #
DomainDetective/CertificateInventoryRiskAnalyzer.cs:266
Returns: Boolean

Attempts to resolve a risk profile label to a known profile. Returns false for null/empty input and unrecognized labels.

Parameters

riskProfile System.String requiredposition: 0
normalizedRiskProfile System.String@ requiredposition: 1

Fields

public static readonly String MinimumSeverityAcceptedValues #

Represents the minimum severity accepted values value.

public static readonly String RiskProfileAcceptedValues #

Represents the risk profile accepted values value.

{{ include "footer" }}