DCSync

The DCSync command in Mimikatz allows an attacker to simulate a domain controller and retrieve password hashes and encryption keys from other domain controllers, without executing any code on the target.

Name: DCSync

Codename: I-DCSync

Severity: Critical

Type: Indicator of Attack