Tag: Shadow

Parsing the msDS-KeyCredentialLink value for ShadowCredentials attack
January 18, 2025
In-depth explanation of the msDS-KeyCredentialLink attribute used in a shadow credentials attack, and how to parse it.
active-directory attribute credentials DNwithBinary ldap msDS-KeyCredentialLink research RSAKeyMaterial shadow windows