Skip to content
Threat Feed
Subscribe

Tag

Dcsync

2 briefs RSS
medium advisory

Potential Active Directory Replication Account Backdoor

Attackers can modify Active Directory object security descriptors to grant DCSync rights to unauthorized accounts, creating a backdoor to extract credential data.

Active Directory credential-access persistence active-directory dcsync
2r 2t
critical advisory

Windows AD Domain Replication ACL Addition Detection

This brief details the detection of unauthorized modifications to Active Directory domain replication Access Control Lists (ACLs), specifically targeting permissions that enable DCSync attacks, potentially leading to sensitive data exfiltration and privilege escalation.

Active Directory active-directory dcsync acl windows privilege-escalation persistence
2r 2t