An ACE Up the Sleeve: Designing Active Directory DACL Backdoors

Active Directory (AD) object discretionary access control lists (DACLs) are an untapped offensive landscape, often overlooked by attackers and defe...