#auditing

Windows RBCD Audits: Trace Resource-Based Kerberos Delegation

Audit which Active Directory principals may delegate to a service, distinguish RBCD from classic KCD, and verify scope without changing directory state.