DACL

Active Directory

Abusing Active Directory DACLs: GenericAll, WriteDACL, and the Path to Domain Compromise

How attackers abuse GenericAll and WriteDACL ACEs in Active Directory, and how blue teams detect and prevent it.