From Dev.to
The night a domain controller replicated every password (Event 4662)
The scenario is fictional (10.0.0.0/8). Event and PowerShell details are from the book, not tested live. Detection only. A domain controller holds everyone's credentials. That night it handed them ove...