Replication privileges granted to perform DCSync attack

Detects scenarios where an attacker grants replication privilege to an account to exflitrate Active Directory credentials