SID filter as security boundary between domains? (Part 6) - Schema change trust attack - from child to parent — Improsec | improving security
https://improsec.com/tech-blog/sid-filter-as-security-boundary-between-domains-part-6-schema-change-trust-attack-from-child-to-parent