Detection Script
For complete attack details, detection indicators, and mitigation strategies, see the NTDS.dit Dumping (Attack #15) section in the Five Eyes AD Attacks guide.
NTDS.dit Extraction Detection Script
Detect NTDS.dit file access and offline password hash extraction.