Added support to Format-NtSecurityDescriptor for access check results.

Author: tyranid

NtObjectManager/NtObjectManager.psm1

@@ -1835,6 +1835,8 @@ function Format-NtSecurityDescriptor {
         [NtApiDotNet.NtObject]$Object,
         [Parameter(Position = 0, ParameterSetName = "FromSecurityDescriptor", Mandatory = $true, ValueFromPipeline)]
         [NtApiDotNet.SecurityDescriptor]$SecurityDescriptor,
+        [Parameter(Position = 0, ParameterSetName = "FromAccessCheck", Mandatory = $true, ValueFromPipeline)]
+        [NtObjectManager.AccessCheckResult]$AccessCheckResult,
         [Parameter(Position = 0, ParameterSetName = "FromAcl", Mandatory = $true)]
         [AllowEmptyCollection()]
         [NtApiDotNet.Acl]$Acl,
@@ -1887,6 +1889,12 @@ function Format-NtSecurityDescriptor {
                     }
                     ($fake_sd, $Type, "UNKNOWN")
                 }
+                "FromAccessCheck" {
+                    $Check_sd = New-NtSecurityDescriptor $AccessCheckResult.SecurityDescriptor
+                    $Type = Get-NtType $AccessCheckResult.TypeName
+                    $Name = $AccessCheckResult.Name
+                    ($Check_sd, $Type, $Name)
+                }
             }
 
             if ($ToSddl) {