Resetting a password doesn’t always remove attackers from Active Directory. Specops Software explains how cached credentials and Kerberos tickets can keep attackers authenticated after a reset.
First seen on bleepingcomputer.com
Jump to article: www.bleepingcomputer.com/news/security/why-changing-passwords-doesnt-end-an-active-directory-breach/
