Minimal permissions required to resolve Guid of Active Directory Object

As part of an application that I’m writing, I attempt to resolve an active directory object from Guid to the object’s Distinguished name. For some restricted objects, I must grant my service account additional permissions in order to resol… Continue reading Minimal permissions required to resolve Guid of Active Directory Object

Can hashes labeled ‘lm’ in SAM database mimikatz dump be another type than (NT)LM?

When I dump the password history hashes stored in the SAM database with mimikatz lsadump::dcsync tool, for every i’th password (re-)set by a SAM account there are two hashes stored by Active Directory (AD): ntlm- i and lm- i. I know storin… Continue reading Can hashes labeled ‘lm’ in SAM database mimikatz dump be another type than (NT)LM?