cyber-hunting-for-dcsync-attacks

name	cyber-hunting-for-dcsync-attacks
description	Detect DCSync attacks by analyzing Windows Event ID 4662 for unauthorized DS-Replication-Get-Changes requests from non-domain-controller accounts.
hide	true

YURI skill adapter

Authoritative source: .claude/skills/cyber-hunting-for-dcsync-attacks/SKILL.md

Authoritative source SHA-256: 5bc069b9b5361bdafb35ed0e4cdfb3452144f5f935e63553613c19d13f9cb5b2

Source class: cyber-armed

Before acting, read the authoritative source file above completely from beginning to end. If the governed source is absent, run node _SYSTEM/Scripts/skill-recall.mjs --show cyber-hunting-for-dcsync-attacks and read its complete verified output. Follow that source as the skill body; this adapter is a non-authoritative metadata-and-pointer projection.