DCSync

Active Directory

DCSync Attack and Defense: Abusing Directory Replication Rights

How DCSync abuses AD replication rights via DRSUAPI to dump credentials, and how blue teams can detect and stop it.