adminsdholder modification detector — free browser tool | fatcousin

drop ad replication + acl audit · detect adminsdholder tampering

input

drop AD replication metadata + ACL audit export

5136/5137 evtx csv · LDIF diff · replication json · multi-file

Select file

flags non-system AdminSDHolder mods · full-control ACE adds · inheritable ACE changes · SDProp timing gaps

limits

heuristic screener · ACL export format varies — SD/ACE parsing is indicative only · not definitive proof

status

>ready