Active Directory User Backdoors — Detection Rule

Detects scenarios where one can control another users or computers account without having to use their credentials.

Read the full analysis on IntelFusions