Rubeus icon indicating copy to clipboard operation
Rubeus copied to clipboard
verified publisher icon GhostPack

Unable to see trusted domain SID in PAC

Open OlddriverSZ opened this issue 3 years ago • 1 comments

image User Jax in domain A, is a member of more than 100 groups (DL).

however, I can't see those domain local groups SIDs in PAC when decrypting TGT image

OlddriverSZ avatar Jan 18 '22 05:01 OlddriverSZ

Domain local groups are not stored in the ExtraSIDS of the PAC but in Groups. Although you only have 5 in the screenshot so something is still not right there.

CCob avatar May 12 '22 06:05 CCob