Skip to content
attack.paths
Sign in
← LibraryTechnique entry
AD-CON-DELLateral Movement

Constrained Delegation Abuse

Abuse msDS-AllowedToDelegateTo to impersonate any user to the configured service via S4U.

§ Where this technique fits

AD-CON-DEL is catalogued under the Lateral Movement tactic of the offensive-security kill-chain. It appears in 0 approved dossiers in the registry, typically.