focused tool to search and audit msDS-AllowedToActOnBehalfOfOtherIdentity attributes in Active Directory — detecting RBCD misconfigurations, Kerberos delegation risks, and privilege escalation paths.
active-directoryrbcdrbcd-delegation-auditorresource-based-attack-surfaceactive-directory-triage-toolkerberos-delegation-inspectorprivilege-escalation-discovery-logicrbcd-vulnerability-scanner-proad-constrained-delegation-logicdirectory-services-security-auditautomated-ad-path-finder
-
Updated
Apr 29, 2026 - C#