From gMSA to dMSA: Understanding BadSuccessor and BetterSuccessor
A technical deep dive into Active Directory managed service accounts, dMSA migration, Kerberos authentication, and the BadSuccessor and BetterSuccessor privilege escalation …
The archive
Research
Security theory, Active Directory internals, and technical research notes.