So, you swiped domain admin credentials and want to maintain persistence without getting caught like a script kiddie. By leveraging the "Power of DC Shadow" to exploit the sIDHistory attribute, you will be able to own the forest.In this workshop, we'll cover how to use sIDHistory and DCShadow in tandem and discuss the types of data that can be injected into Active Directory. Finally, we will show you how to be blue team cyber warrior to detect DC Shadow using deep packet inspection and prevent this attack using IPSEC tunnels.