Juicing ntds.dit Files to the Last Drop

This article details new DSInternals PowerShell capabilities for offline Active Directory data access and attack support, including Golden gMSA/dMSA password derivation via KDS root keys, full Windows LAPS password decryption (including histories and DSRM), extraction of trust passwords with Kerberos key derivation for ticket attacks, retrieval of BitLocker recovery keys, support for RODC databases, and significant performance improvements; it also underscores security, compliance, and detection considerations around handling ntds.dit.