Skip to content

Commit de04953

Browse files
author
malacupa
committed
limit information collected by "azurehound list group-members" to only collect member IDs
1 parent faeb09f commit de04953

File tree

2 files changed

+4
-4
lines changed

2 files changed

+4
-4
lines changed

client/groups.go

+3-3
Original file line numberDiff line numberDiff line change
@@ -61,10 +61,10 @@ func (s *azureClient) GetAzureADGroupOwners(ctx context.Context, objectId string
6161
}
6262
}
6363

64-
func (s *azureClient) GetAzureADGroupMembers(ctx context.Context, objectId string, filter string, search string, count bool) (azure.MemberObjectList, error) {
64+
func (s *azureClient) GetAzureADGroupMembers(ctx context.Context, objectId string, filter string, search string, count bool, selectCols []string) (azure.MemberObjectList, error) {
6565
var (
6666
path = fmt.Sprintf("/%s/groups/%s/members", constants.GraphApiBetaVersion, objectId)
67-
params = query.Params{Filter: filter, Search: search, Count: count}.AsMap()
67+
params = query.Params{Filter: filter, Search: search, Count: count, Select: selectCols}.AsMap()
6868
response azure.MemberObjectList
6969
)
7070
if res, err := s.msgraph.Get(ctx, path, params, nil); err != nil {
@@ -246,7 +246,7 @@ func (s *azureClient) ListAzureADGroupMembers(ctx context.Context, objectId stri
246246
nextLink string
247247
)
248248

249-
if list, err := s.GetAzureADGroupMembers(ctx, objectId, filter, search, false); err != nil {
249+
if list, err := s.GetAzureADGroupMembers(ctx, objectId, filter, search, false, selectCols); err != nil {
250250
errResult.Error = err
251251
if ok := pipeline.Send(ctx.Done(), out, errResult); !ok {
252252
return

cmd/list-group-members.go

+1-1
Original file line numberDiff line numberDiff line change
@@ -92,7 +92,7 @@ func listGroupMembers(ctx context.Context, client client.AzureClient, groups <-c
9292
}
9393
count = 0
9494
)
95-
for item := range client.ListAzureADGroupMembers(ctx, id, "", "", "", nil) {
95+
for item := range client.ListAzureADGroupMembers(ctx, id, "", "", "", []string{"id"}) {
9696
if item.Error != nil {
9797
log.Error(item.Error, "unable to continue processing members for this group", "groupId", id)
9898
} else {

0 commit comments

Comments
 (0)