Module: searchο
This module is used to search information in the neo4j database.
General usage:
π¦ > search <submodule> <filter> <term>
Warning
The provided search term must be a single word. You canβt use this module to search for a complete sentence containing spaces.
Results can be exported to a csv file using the keyword βexportβ at the end of the command:
π¦ > search <submodule> <filter> <term> export
A csv file will be generated in βexportsβ directory.
search passwordο
This module operates search on passwords.
General usage:
π¦ > search password <filter> [term]
To filter by enabled users, β=enabledβ must be used:
π¦ > search password=enabled <filter> [term]
isο
This directive finds passwords corresponding to the searched term. It is case sensitive.
π¦ > search password is P@ssw0rd
likeο
This directive finds passwords containing the searched term. It is not case sensitive.
π¦ > search password like QwErTy
lmο
This directive finds passwords using LM storage.
π¦ > search password lm
user_as_passο
This directive finds passwords equal to username. It is not case sensitive.
π¦ > search password user_as_pass
emptyο
This directive finds empty passwords.
π¦ > search password empty
Note
We recommend to use this directive with βpassword=enabledβ to see only enabled users with empty password.
search userο
This module operates search on users.
General usage:
π¦ > search user <filter> [term]
To filter by enabled users, β=enabledβ must be used:
π¦ > search user=enabled <filter> [term]
isο
This directive finds users corresponding to the searched term. It is case sensitive.
π¦ > search user is user1
likeο
This directive finds users containing the searched term. It is not case sensitive.
π¦ > search user like adm
search computerο
This module operates search on computers.
General usage:
π¦ > search computer <filter> <term>
isο
This directive finds computers corresponding to the searched term. It is case sensitive.
π¦ > search computer is SRV01
likeο
This directive finds computers containing the searched term. It is not case sensitive.
π¦ > search computer like SRV
search descriptionο
This module operates search on description field.
General usage:
π¦ > search description <filter> [term]
isο
This directive finds descriptions corresponding to the searched term. It is case sensitive.
π¦ > search description is testsecret
likeο
This directive finds descriptions containing the searched term. It is not case sensitive.
π¦ > search description like pass
not_emptyο
This directive finds all not empty descriptions.
π¦ > search description not_empty