https://www.elastic.co/docs/reference/security/prebuilt-rules/rules/windows/credential_access_dcsync_replication_rights
Potential Credential Access via DCSync | Prebuilt detection rules reference
This rule identifies when a User Account starts the Active Directory Replication Process. Attackers can use the DCSync technique to get credential...
credential accesspotentialviadcsyncprebuilt
https://netwrix.com/it/cybersecurity-glossary/cyber-security-attacks/dcsync-attack/
Padroneggiare gli attacchi DCSync: Tecniche, Rilevamento e Difesa | Netwrix
Scopri come gli attacchi DCSync sfruttano la replica di AD per rubare credenziali, con indizi dalla rilevazione alla prevenzione.
gliattacchidcsynctecnichedifesa