Detection Script
For complete attack details, detection indicators, and mitigation strategies, see the RBCD (Attack #16) section in the Five Eyes AD Attacks guide.
Detect RBCD abuse via msDS-AllowedToActOnBehalfOfOtherIdentity modifications.
For complete attack details, detection indicators, and mitigation strategies, see the RBCD (Attack #16) section in the Five Eyes AD Attacks guide.