Browsed by
Tag: AdminCount

What is AdminSDHolder Modification?

What is AdminSDHolder Modification?

Modifying the Access Control List (ACL) of the AdminSDHolder container in Active Directory enables an attacker to achieve and maintain persistence in an already compromised domain, even if an administrator finds and removes the attacker’s permission on a protected object the AdminSDHolder controls.