unconstrained_delegation
Identify Active Directory users and computers with unconstrained delegation enabled, revealing potential Kerberos delegation attack paths.
Instructions
Users AND computers configured for unconstrained delegation. (requête vérifiée)
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| k | No | unconstrained_delegation | |
| cy | No | MATCH (n) WHERE n.unconstraineddelegation = true RETURN [l IN labels(n) WHERE l <> 'Base'][0] AS kind, n.name AS name ORDER BY kind, name |