DCSync

An attack technique that abuses Active Directory's replication protocol to ask a domain controller for the password hashes of any account, administrators included. An attacker holding replication rights can extract the entire domain's credentials without ever running code on the controller. It frequently leads to full compromise via golden ticket or pass-the-hash.