Detects potential abuse of ntdsutil to dump ntds.dit database to a suspicious location
Already have an account? Log in