mpgn on Twitter: "If you compromise a member of the Backup Operators group there is a direct path the become Domain Admin without a RDP/WinRM access to the DC ! Dump and export the SAM remotely on a remote share ! 🔥🎉 Thanks to @filip_dragovic for the initial POC ! https://t.co/M4MRbyJWLQ https://t.co/c5ypq32zMi" / Twitter
https://twitter.com/mpgn_x64/status/1493699411658092558