Function checkForUpdates

web/scripts/ragnar_modern.js:7533–7650

()

                        const who = f.sname || f.principal || '—';
                        return `<tr class="border-t border-slate-800">
                            <td class="px-2 py-1 ${cls}">${escapeHtml(f.type)}</td>
                            <td class="px-2 py-1 font-mono">${escapeHtml(who)}</td>
                            <td class="px-2 py-1 font-mono text-gray-400">${escapeHtml((f.etypes || []).join(', ') || '—')}</td>
                        </tr>`;
                    }).join('') +
                    '</tbody></table>';
            } else {
                html += '<p class="text-xs text-green-400/80">No Kerberos downgrade, kerberoasting, or AS-REP roasting seen (AES only).</p>';
            }
        }
        if (d.reasons && d.reasons.length) {
            html += '<ul class="text-xs text-gray-400 mt-2 list-disc pl-5">' +
                d.reasons.map(r => '<li>' + escapeHtml(r) + '</li>').join('') + '</ul>';
        }
        (d.advisories || []).forEach(a => {
            html += `<div class="mt-2 px-3 py-2 rounded border text-xs text-gray-400 border-slate-700 bg-slate-900/40">${escapeHtml(a)}</div>`;
        });
        out.innerHTML = html;
    } catch (e) {
        out.innerHTML = '<p class="text-sm text-red-400">Failed: ' + escapeHtml(e.message) + '</p>';
    } finally {
        _ndBusy(btn, false);
    }
}
async function smbTrustBaseline() {
    try {
        await postAPI('/api/net/smb-baseline', { action: 'reset' });
        addConsoleMessage('SMB baseline reset — re-learning mDNS responders & SMBv1 hosts', 'info');
        await runSmbWatch();
    } catch (e) {
        addConsoleMessage('Failed to reset SMB baseline: ' + e.message, 'error');
    }
}

// ---- LDAP Watch (Active Directory / LDAP, passive) -------------------------
const _LDAP_VERDICT_STYLE = {
    clean:        ['bg-green-950/40 border-green-900 text-green-400', '✓ No LDAP/AD exposure or attack observed'],
    suspicious:   ['bg-amber-950/50 border-amber-800 text-amber-300', '⚠ Weak LDAP posture / recon — anonymous binds, enumeration, or CLDAP exposure'],
    compromised:  ['bg-red-950/60 border-red-800 text-red-300', '🛑 LDAP CREDENTIAL EXPOSURE / ATTACK — cleartext creds, StartTLS strip, injection, or brute force'],
    unknown:      ['bg-slate-800 border-slate-700 text-slate-400', '— Could not determine'],
};
const _LDAP_SEV_STYLE = { high: 'text-red-300', warn: 'text-amber-300', low: 'text-gray-400', info: 'text-gray-500' };
function _ldapFillIfaces() {
    const sel = document.getElementById('ldap-iface');
    if (!sel || sel.dataset.filled === '1') return Promise.resolve();
    return fetchAPI('/api/net/interfaces').then(x => {
        (x.interfaces || []).forEach(i => {
            const o = document.createElement('option');
            o.value = i.name;
            const tag = i.type === 'wifi' ? ' (WiFi)' : i.type === 'ethernet' ? ' (LAN)' : (i.type ? ' (' + i.type + ')' : '');
            o.textContent = i.name + tag;
            sel.appendChild(o);
        });
        sel.dataset.filled = '1';
    }).catch(() => {});
}
async function runLdapWatch() {
    const out = document.getElementById('ldap-results');