ACE-Based Domain Persistence

Once an attacker reaches high privilege in Active Directory, they can plant durable backdoors by editing the access control entries (ACEs) on key objects rather than holding a password. This lesson explains why ACE-based persistence survives credential resets, what objects are targeted, and how to communicate the risk clearly in interviews, reports, and stakeholder conversations.

View pricing Sign in

What you'll learn

Access Control Entry (ACE)
AdminSDHolder / SDProp
DCSync rights
Security descriptor backdoor
msDS-AllowedToDelegateTo
Persistence vs. access

What premium includes

All 54 lessons: AD techniques, professional skills, each with interview answers and study kits
Complete study kit for every lesson: quizzes, flashcards, and briefs
Every learning track with full structured progression
All 12 attack paths: full compromise walkthroughs for interviews and reports
New lessons and attack paths added regularly

ACE-Based Domain Persistence

What you'll learn

What premium includes

Continue with free content