Shadow Credential Attacks
Overview This attack method targets Active Directory User or Computer accounts that are configured with weak ACEs1. The attacker can compromise such users or computers by injecting rogue certificate or keys in the msDS-KeyCredentialLink attribute. The attack method allows the attacker to authenticate as the targeted user or computer, even if the password is reset. […]