MemberOf

Groups in active directory grant their members any privileges the group itself has.

If a group has rights to another principal, users/computers in the group, as well as other groups inside the group inherit those permissions.

Abuse Info

No abuse is necessary. This edge simply indicates that a principal belongs to a security group.

Opsec Considerations

No opsec considerations apply to this edge.

Edge Schema

Source: User, Group, Computer
Destination: Group
Traversable: Yes

References

• https://adsecurity.org/?tag=ad-delegation
• https://www.itprotoday.com/management-mobility/view-or-remove-active-directory-delegated-permissions