Skip to content

add a plugin to filter roadrecondb control access policy and show what is applied#153

Open
Mayfly277 wants to merge 2 commits into
dirkjanm:masterfrom
Mayfly277:capfilter
Open

add a plugin to filter roadrecondb control access policy and show what is applied#153
Mayfly277 wants to merge 2 commits into
dirkjanm:masterfrom
Mayfly277:capfilter

Conversation

@Mayfly277
Copy link
Copy Markdown

@Mayfly277 Mayfly277 commented May 27, 2026

A plugin to filter CAP and show what is applied

python3 capfilter.py -h
usage: capfilter.py [-h] [-d DATABASE] [-u UPN] [-m] [-c] [-r] [-p {Android,iOS,macOS,Windows_Phone,Windows,Linux,ChromeOS,Unknown}] [-l LOCATION] [-t] [--client {Browser,Legacy Clients,Exchange ActiveSync,Mobile and Desktop clients}] [--resource RESOURCE]
                    [--resource_id RESOURCE_ID] [--ip IP] [--country ISO2]

ROADrecon CAP analysis plugin

options:
  -h, --help            show this help message and exit
  -d DATABASE, --database DATABASE
                        Database file or SQLAlchemy URL
  -u UPN, --upn UPN     User principal name filter
  -m, --match           Show matching rules only
  -c, --control         Show control rules only
  -r, --reporting       Show reporting as a matching rule
  -p {Android,iOS,macOS,Windows_Phone,Windows,Linux,ChromeOS,Unknown}, --platform {Android,iOS,macOS,Windows_Phone,Windows,Linux,ChromeOS,Unknown}
                        Filter on a platform
  -l LOCATION, --location LOCATION
                        Filter on a location (by display name)
  -t, --trusted_location
                        Mark the location as trusted
  --client {Browser,Legacy Clients,Exchange ActiveSync,Mobile and Desktop clients}
                        Filter on client type
  --resource RESOURCE   Filter on resource display name
  --resource_id RESOURCE_ID
                        Filter on resource app ID
  --ip IP               Filter on a source IP address (matched against CIDR ranges)
  --country ISO2        ISO 3166-1 alpha-2 country code (e.g. NG, RU, FR) — can be used alone or combined with --ip
image

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant