CAHCE

Path   : Microsoft.PowerShell.Core\FileSystem::C:\ProgramData\PuppetLabs\puppet\cache\clientbucket
Owner  : BUILTIN\Administrators
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
Audit  :
Sddl   : O:BAG:SYD:(A;OICIID;FA;;;SY)(A;OICIID;FA;;;BA)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\ProgramData\PuppetLabs\puppet\cache\client_data
Owner  : BUILTIN\Administrators
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
Audit  :
Sddl   : O:BAG:SYD:(A;OICIID;FA;;;SY)(A;OICIID;FA;;;BA)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\ProgramData\PuppetLabs\puppet\cache\client_yaml
Owner  : BUILTIN\Administrators
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
Audit  :
Sddl   : O:BAG:SYD:(A;OICIID;FA;;;SY)(A;OICIID;FA;;;BA)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\ProgramData\PuppetLabs\puppet\cache\facts.d
Owner  : BUILTIN\Administrators
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
Audit  :
Sddl   : O:BAG:SYD:(A;OICIID;FA;;;SY)(A;OICIID;FA;;;BA)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\ProgramData\PuppetLabs\puppet\cache\lib
Owner  : BUILTIN\Administrators
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
Audit  :
Sddl   : O:BAG:SYD:(A;OICIID;FA;;;SY)(A;OICIID;FA;;;BA)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\ProgramData\PuppetLabs\puppet\cache\locales
Owner  : BUILTIN\Administrators
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
Audit  :
Sddl   : O:BAG:SYD:(A;OICIID;FA;;;SY)(A;OICIID;FA;;;BA)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\ProgramData\PuppetLabs\puppet\cache\preview
Owner  : BUILTIN\Administrators
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
Audit  :
Sddl   : O:BAG:SYD:(A;OICIID;FA;;;SY)(A;OICIID;FA;;;BA)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\ProgramData\PuppetLabs\puppet\cache\state
Owner  : BUILTIN\Administrators
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
Audit  :
Sddl   : O:BAG:SYD:(A;OICIID;FA;;;SY)(A;OICIID;FA;;;BA)

----------------------------------------------------------------------
STATE

Path   : Microsoft.PowerShell.Core\FileSystem::C:\ProgramData\PuppetLabs\puppet\cache\state\graphs
Owner  : BUILTIN\Administrators
Group  : NT AUTHORITY\SYSTEM
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
Audit  :
Sddl   : O:BAG:SYD:(A;OICIID;FA;;;SY)(A;OICIID;FA;;;BA)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\ProgramData\PuppetLabs\puppet\cache\state\classes.txt
Owner  : UNEXPENDED-RASP\Administrator
Group  : UNEXPENDED-RASP\None
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
Audit  :
Sddl   : O:LAG:S-1-5-21-1850122522-3541303673-3022055181-513D:(A;ID;FA;;;SY)(A;ID;FA;;;BA)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\ProgramData\PuppetLabs\puppet\cache\state\last_run_report.yaml
Owner  : UNEXPENDED-RASP\Administrator
Group  : UNEXPENDED-RASP\None
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         UNEXPENDED-RASP\Administrator Allow  FullControl
Audit  :
Sddl   : O:LAG:S-1-5-21-1850122522-3541303673-3022055181-513D:PAI(A;;FA;;;SY)(A;;FA;;;BA)(A;;FA;;;LA)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\ProgramData\PuppetLabs\puppet\cache\state\last_run_summary.yaml
Owner  : UNEXPENDED-RASP\Administrator
Group  : UNEXPENDED-RASP\None
Access : Everyone Allow  Read, Synchronize
         NT AUTHORITY\SYSTEM Allow  FullControl
         UNEXPENDED-RASP\Administrator Allow  Write, Delete, Read, ChangePermissions, TakeOwnership, Synchronize
         UNEXPENDED-RASP\None Allow  Read, Synchronize
Audit  :
Sddl   : O:LAG:S-1-5-21-1850122522-3541303673-3022055181-513D:PAI(A;;FR;;;WD)(A;;FA;;;SY)(A;;0x1f019f;;;LA)(A;;FR;;;S-1
         -5-21-1850122522-3541303673-3022055181-513)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\ProgramData\PuppetLabs\puppet\cache\state\resources.txt
Owner  : UNEXPENDED-RASP\Administrator
Group  : UNEXPENDED-RASP\None
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
Audit  :
Sddl   : O:LAG:S-1-5-21-1850122522-3541303673-3022055181-513D:(A;ID;FA;;;SY)(A;ID;FA;;;BA)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\ProgramData\PuppetLabs\puppet\cache\state\state.yaml
Owner  : UNEXPENDED-RASP\Administrator
Group  : UNEXPENDED-RASP\None
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         UNEXPENDED-RASP\Administrator Allow  FullControl
Audit  :
Sddl   : O:LAG:S-1-5-21-1850122522-3541303673-3022055181-513D:PAI(A;;FA;;;SY)(A;;FA;;;BA)(A;;FA;;;LA)

Path   : Microsoft.PowerShell.Core\FileSystem::C:\ProgramData\PuppetLabs\puppet\cache\state\transactionstore.yaml
Owner  : UNEXPENDED-RASP\Administrator
Group  : UNEXPENDED-RASP\None
Access : NT AUTHORITY\SYSTEM Allow  FullControl
         BUILTIN\Administrators Allow  FullControl
         UNEXPENDED-RASP\Administrator Allow  FullControl
Audit  :
Sddl   : O:LAG:S-1-5-21-1850122522-3541303673-3022055181-513D:PAI(A;;FA;;;SY)(A;;FA;;;BA)(A;;FA;;;LA)