@@ -173,7 +173,7 @@ public bool IsACLProtected(byte[] ntSecurityDescriptor) {
173173 public bool ? IsAdminSDHolderProtected ( byte [ ] ntSecurityDescriptor , string adminSdHolderHash = null , string objectName = "" ) {
174174 bool ? isAdminSdHolderProtected = null ;
175175
176- if ( ntSecurityDescriptor == null || string . IsNullOrEmpty ( adminSdHolderHash ) ) {
176+ if ( ntSecurityDescriptor == null || ntSecurityDescriptor . Length == 0 || string . IsNullOrEmpty ( adminSdHolderHash ) ) {
177177 _log . LogDebug ( "Required input(s) missing for AdminSDHolder hash comparison for object: {Name}" , objectName ) ;
178178 return isAdminSdHolderProtected ;
179179 }
@@ -246,7 +246,7 @@ public string CalculateImplicitACLHash(byte[] ntSecurityDescriptor, string objec
246246 return string . Empty ;
247247 }
248248
249- _log . LogDebug ( "Calculating hash of implicit ACEs for {Name}" , objectName ) ;
249+ _log . LogInformation ( "Calculating hash of implicit ACEs for {Name}" , objectName ) ;
250250 var descriptor = _utils . MakeSecurityDescriptor ( ) ;
251251
252252 try
@@ -263,7 +263,7 @@ public string CalculateImplicitACLHash(byte[] ntSecurityDescriptor, string objec
263263
264264 // Check if DACL is protected
265265 bool isDaclProtected = descriptor . AreAccessRulesProtected ( ) ;
266- _log . LogDebug ( "DACL Protection status for {Name}: {IsProtected}" , objectName , isDaclProtected ) ;
266+ _log . LogInformation ( "DACL Protection status for {Name}: {IsProtected}" , objectName , isDaclProtected ) ;
267267
268268 // Get all ACEs, including Deny ACEs, but skip inherited ones
269269 var aceList = new List < ACEForHashing > ( ) ;
0 commit comments