redteam The Phantom Menace: Exposing hidden risks through ACLs in Active Directory (Part 1) The abuse of misconfigured Access Control Lists is nothing new. However, it is still one of the main ways of lateral movement and privilege escalation within an active directory domain.