Acl Abuse
Status: Scaffold — content in progress
ATT&CK: [Fill in technique ID]
Platforms: Windows (Active Directory)
Severity: [Critical / High / Medium]
What It Exploits
[Technical primitive exploited]
Attack Flow
[Step-by-step attack commands]
CTI Examples
[Threat actor usage with evidence labels]
Behavioral Indicators
[What the attack looks like in logs]
Cross-Links
| Topic | Link |
|---|---|
| Detection | [Link to detection page] |
| Lab Simulation | [Link to simulation] |