AdminSDHolder, the template attackers love
Posted in Security Architecture, Technology on Feb 14th, 2023
Let´s talk about one of the more obscure objects in Active Directory: AdminSDHolder. AdminSDHolder is a container in the System part of the domain. Its permissions work as a template. Every hour or so a process on the domain controller holding the PDC emulator role, called SDProp, goes through all members of the protected groups, […]