Language:
DCShadow is another late-stage kill chain attack that allows an attacker with privileged credentials to register a rogue domain controller in order to push changes to a domain via domain replication.
MITRE ATT&CK description
DCShadow official
DCShadow explained
Name: DCShadow
Codename: I-DCShadow
Severity: Critical