Security News > 2021 > November > Guarding against DCSync attacks
2021-11-23 06:30
Threat actors can launch DCSync attacks using tools like Mimikatz or the Get-ADReplAccount cmdlet from DSInternals.
Stopping DCSync attacks is not as easy.
There are still steps organizations can take to prevent and detect DCSync attacks against their environment.
Organizations can take several steps to reduce the likelihood that an intruder can execute DCSync attacks.
Prevent DCSync attacks from opening paths to your system.
DCSync attacks are a crafty way for attackers to maintain persistence by ensuring they obtain a broad level of access that is not trivial to remediate.