Class PNETLOGON_DELTA_POLICY

scapy/layers/msrpce/raw/ms_nrpc.py:1420–1462

class PNETLOGON_DELTA_POLICY(NDRPacket):
    ALIGNMENT = (4, 8)
    fields_desc = [
        NDRIntField("MaximumLogSize", 0),
        NDRPacketField("AuditRetentionPeriod", OLD_LARGE_INTEGER(), OLD_LARGE_INTEGER),
        NDRByteField("AuditingMode", 0),
        NDRIntField(
            "MaximumAuditEventCount",
            None,
            size_of="EventAuditingOptions",
            adjust=lambda _, x: (x - 1),
        ),
        NDRFullEmbPointerField(
            NDRConfFieldListField(
                "EventAuditingOptions",
                [],
                NDRIntField("", 0),
                size_is=lambda pkt: (pkt.MaximumAuditEventCount + 1),
            )
        ),
        NDRPacketField("PrimaryDomainName", UNICODE_STRING(), UNICODE_STRING),
        NDRFullEmbPointerField(
            NDRPacketField("PrimaryDomainSid", PRPC_SID(), PRPC_SID)
        ),
        NDRPacketField("QuotaLimits", NLPR_QUOTA_LIMITS(), NLPR_QUOTA_LIMITS),
        NDRPacketField("ModifiedId", OLD_LARGE_INTEGER(), OLD_LARGE_INTEGER),
        NDRPacketField("DatabaseCreationTime", OLD_LARGE_INTEGER(), OLD_LARGE_INTEGER),
        NDRIntField("SecurityInformation", 0),
        NDRIntField("SecuritySize", None, size_of="SecurityDescriptor"),
        NDRFullEmbPointerField(
            NDRConfStrLenField(
                "SecurityDescriptor", "", size_is=lambda pkt: pkt.SecuritySize
            )
        ),
        NDRPacketField("DummyString1", UNICODE_STRING(), UNICODE_STRING),
        NDRPacketField("DummyString2", UNICODE_STRING(), UNICODE_STRING),
        NDRPacketField("DummyString3", UNICODE_STRING(), UNICODE_STRING),
        NDRPacketField("DummyString4", UNICODE_STRING(), UNICODE_STRING),
        NDRIntField("DummyLong1", 0),
        NDRIntField("DummyLong2", 0),
        NDRIntField("DummyLong3", 0),
        NDRIntField("DummyLong4", 0),
    ]


class PUNICODE_STRING(NDRPacket):