Loading...
Loading...

Resource-Based Constrained Delegation Detection Script

Detect RBCD abuse via msDS-AllowedToActOnBehalfOfOtherIdentity modifications.

  1. Five Eyes AD Attacks
  2. RBCD (Attack #16)
  3. Detection Script

Detection Script

For complete attack details, detection indicators, and mitigation strategies, see the RBCD (Attack #16) section in the Five Eyes AD Attacks guide.

Related Resources

  • RBCD (Attack #16) - Complete Guide
  • Tier 0 Security Architecture
  • Privileged Access Workstations
Loading...
Loading...