Eddy's Photo journal
https://www.sentinelone.com/blog/detecting-a-rogue-domain-controller-dcshadow-attack