in msticpy/datamodel/entities/account.py [0:0]
def _create_from_event(self, src_event, role):
if "Name" in src_event:
self.Name = src_event["Name"]
if role == "subject" and "SubjectUserName" in src_event:
self.Name = src_event["SubjectUserName"]
self.NTDomain = (
src_event["SubjectUserDomain"]
if "SubjectUserDomain" in src_event
else None
)
self.Sid = (
src_event["SubjectUserSid"] if "SubjectUserSid" in src_event else None
)
self.LogonId = (
src_event["SubjectLogonId"] if "SubjectLogonId" in src_event else None
)
if role == "target" and "TargetUserName" in src_event:
self.Name = src_event["TargetUserName"]
self.NTDomain = (
src_event["TargetUserDomain"]
if "TargetUserDomain" in src_event
else None
)
self.Sid = (
src_event["TargetUserSid"] if "TargetUserSid" in src_event else None
)
self.LogonId = (
src_event["TargetLogonId"] if "TargetLogonId" in src_event else None
)
self.AadTenantId = (
src_event["AadTenantId"] if "AadTenantId" in src_event else None
)
self.Sid = src_event["Sid"] if "Sid" in src_event else None
self.NTDomain = src_event["NtDomain"] if "NtDomain" in src_event else None
self.AadUserId = src_event["AadUserId"] if "AadUserId" in src_event else None
self.PUID = src_event["PUID"] if "PUID" in src_event else None
if "DisplayName" in src_event:
self.DisplayName = src_event["DisplayName"]
elif "AccountName" in src_event:
self.DisplayName = src_event["AccountName"]
else:
self.DisplayName = None
if "UPNSuffix" in src_event:
self.UPNSuffix = src_event["UPNSuffix"]
elif "UpnSuffix" in src_event:
self.UPNSuffix = src_event["UpnSuffix"]
else:
self.UPNSuffix = None