DCSync TL;DR: Use replication rights (Replicating Directory Changes) to ask a DC for password hashes. Stub — to be filled in. What it is TODO Preconditions / where it applies TODO Technique TODO Detection and defence TODO References TODO