fix: remove false negative when AllExtendedRights is granted on an ESC1 template

Author: jakehildreth

Invoke-Locksmith.ps1

@@ -265,7 +265,8 @@ function Find-ESC1 {
             }
             if (
                 ($SID -notmatch $SafeUsers) -and
-                ( ( ($entry.ActiveDirectoryRights -match 'ExtendedRight') -and ($entry.ObjectType -eq '0e10c968-78fb-11d2-90d4-00c04f79dc55') ) -or
+                ( ( ($entry.ActiveDirectoryRights -match 'ExtendedRight') -and
+                    ( $entry.ObjectType -match '0e10c968-78fb-11d2-90d4-00c04f79dc55|00000000-0000-0000-0000-000000000000' ) ) -or
                 ($entry.ActiveDirectoryRights -match 'GenericAll') )
             ) {
                 $Issue = [pscustomobject]@{
@@ -4973,7 +4974,7 @@ function Invoke-Locksmith {
         [System.Management.Automation.PSCredential]$Credential
     )
 
-    $Version = '2025.9.7'
+    $Version = '2025.9.8'
     $LogoPart1 = @'
     _       _____  _______ _     _ _______ _______ _____ _______ _     _
     |      |     | |       |____/  |______ |  |  |   |      |    |_____|

Locksmith.psd1

@@ -8,7 +8,7 @@
     FunctionsToExport    = 'Invoke-Locksmith'
     GUID                 = 'b1325b42-8dc4-4f17-aa1f-dcb5984ca14a'
     HelpInfoURI          = 'https://raw.githubusercontent.com/jakehildreth/Locksmith/main/en-US/'
-    ModuleVersion        = '2025.9.7'
+    ModuleVersion        = '2025.9.8'
     PowerShellVersion    = '5.1'
     PrivateData          = @{
         PSData = @{

Private/Find-ESC1.ps1

@@ -58,7 +58,8 @@
             }
             if (
                 ($SID -notmatch $SafeUsers) -and
-                ( ( ($entry.ActiveDirectoryRights -match 'ExtendedRight') -and ($entry.ObjectType -eq '0e10c968-78fb-11d2-90d4-00c04f79dc55') ) -or
+                ( ( ($entry.ActiveDirectoryRights -match 'ExtendedRight') -and
+                    ( $entry.ObjectType -match '0e10c968-78fb-11d2-90d4-00c04f79dc55|00000000-0000-0000-0000-000000000000' ) ) -or
                 ($entry.ActiveDirectoryRights -match 'GenericAll') )
             ) {
                 $Issue = [pscustomobject]@{