Zerologon
Named by 3 kept items in this workspace.
2 items name it under classification.key entities and 1 under techniques.
Search every workspace for Zerologon. It matches the name as written, so it can find other things that share it.
The items that name it 3
Netlogon protocol bug allowing DC machine account password to be set to null/empty, enabling DCSync and credential recovery; attack chain: zero password, DCSync as DC, recover admin hash, extract DC password from LSA secrets, restore password
All techniques in this workspace.