# Sanitization Guide

This repository must not contain real customer or tenant audit outputs.

## Do not commit

Generated reports may contain sensitive operational information, including:

- tenant IDs
- domain names
- hostnames
- internal IP addresses
- usernames
- verified domains
- service names and server roles
- sync timestamps
- approximate user counts
- event log messages

Do not commit real files matching:

```text
ADDS-Audit-*
EntraConnect-Audit-*
EntraCloud-Audit-*
HybridIdentity-ExecutiveTechnicalReport-*
HybridIdentity-MergeReport-*
```

The `.gitignore` already blocks these by default. Keep it that way. Public GitHub does not need a guided tour of your identity infrastructure, despite what chaos may whisper.

## Replace real values with examples

Use values like:

| Real value type | Sanitized example |
|---|---|
| Tenant name | Contoso Ltd |
| Tenant ID | 00000000-0000-0000-0000-000000000000 |
| AD domain | contoso.local |
| NetBIOS | CONTOSO |
| Domain controller | DC01.contoso.local |
| Entra Connect server | AADCONNECT01 |
| User | CONTOSO\\admin.user |
| UPN | admin.user@example.com |
| Verified domain | contoso.com |
| Internal IP | 192.0.2.10 |

## Safe samples

The `examples/sanitized-input` folder contains fake sample reports that can be used to demonstrate the merge report.