← LibraryTechnique entry
AD-DACL-ALLEXTCredential Access
AllExtendedRights — DCSync grant
AllExtendedRights on the domain object includes DS-Replication-Get-Changes / -All → DCSync.
§ Where this technique fits
AD-DACL-ALLEXT is catalogued under the Credential Access tactic of the offensive-security kill-chain. It appears in 0 approved dossiers in the registry, typically.