Statements (23)
| Predicate | Object |
|---|---|
| gptkbp:instanceOf |
Active Directory database file
|
| gptkbp:canExtract |
gptkb:Volume_Shadow_Copy_Service
gptkb:ntdsutil |
| gptkbp:contains |
Kerberos authentication data
LDAP directory information domain trust information |
| gptkbp:criticalFor |
domain controller operation
|
| gptkbp:encryption |
may be encrypted with system key (syskey)
|
| https://www.w3.org/2000/01/rdf-schema#label |
NTDS.dit
|
| gptkbp:introducedIn |
gptkb:Windows_2000_Server
|
| gptkbp:location |
%SystemRoot%\\NTDS\\NTDS.dit
|
| gptkbp:numberOfLocations |
organizational units
Active Directory data group memberships password hashes security identifiers user account information |
| gptkbp:operatingSystem |
gptkb:Windows_Server
|
| gptkbp:supportsFormat |
database file
|
| gptkbp:target |
attackers for credential theft
|
| gptkbp:usedBy |
gptkb:Microsoft_Active_Directory
|
| gptkbp:bfsParent |
gptkb:Active_Directory
|
| gptkbp:bfsLayer |
6
|