Detection Script
For complete attack details, detection indicators, and mitigation strategies, see the DCShadow (Attack #12) section in the Five Eyes AD Attacks guide.
DCShadow Detection Script
Detect rogue domain controller registration for unauthorized replication.