Added Get-RpcSecurityPrincipalName

Author: tyranid

NtObjectManager/NtObjectManager.psd1

@@ -133,7 +133,7 @@ FunctionsToExport = 'Get-AccessibleAlpcPort', 'Set-NtTokenPrivilege',
           'Read-FwNetEvent', 'New-FwNetEventListener', 'Start-FwNetEventListener', 'Get-IPsecSaContext',
           'Get-FwEngineOption', 'Set-FwEngineOption', 'New-FwNetEventTemplate', 'Add-FwCondition',
           'Get-FwCallout', 'Add-RpcClientSecurityContext', 'Set-RpcClientSecurityContext', 
-          'Get-RpcClientSecurityContext'
+          'Get-RpcClientSecurityContext', 'Get-RpcSecurityPrincipalName'
 
 # Cmdlets to export from this module, for best performance, do not use wildcards and do not delete the entry, use an empty array if there are no cmdlets to export.
 CmdletsToExport = 'Add-NtKeyHive', 'Get-NtDirectory', 'Get-NtEvent', 'Get-NtFile', 

NtObjectManager/RpcFunctions.ps1

@@ -1484,4 +1484,29 @@ function Get-RpcClientSecurityContext {
             $Client.Transport.SecurityContext | Where-Object ContextId -eq $ContextId
         }
     }
+}
+
+<#
+.SYNOPSIS
+Get the registered security principal name for a RPC server.
+.DESCRIPTION
+This cmdlet gets the registered security principal name for a RPC server.
+.PARAMETER Binding
+Specify the server binding.
+.PARAMETER AuthenticationType
+Specify the authentication type.
+.INPUTS
+None
+.OUTPUTS
+string
+#>
+function Get-RpcSecurityPrincipalName {
+    [CmdletBinding()]
+    Param(
+        [parameter(Mandatory, Position = 0)]
+        [string]$Binding,
+        [parameter(Mandatory, Position = 1)]
+        [NtApiDotNet.Win32.Rpc.Transport.RpcAuthenticationType]$AuthenticationType
+    )
+    [NtApiDotNet.Win32.Rpc.Transport.RpcTransportSecurity]::QueryServicePrincipalName($Binding, $AuthenticationType)
 }