Extracting User Password Data with Mimikatz DCSync | Insider Threat

Using the Mimikatz DCSync command to compromise credentials by replicating information with Directory Replication Service Remote Protocol MS-DRSR.

blog.stealthbits.com