1/n - Here's how #BloodHound can help you determine whether you are vulnerable to PrivExchange by @_dirkjan:

Find the domain head object in the BloodHound GUI, click the number next to "First Degree Controllers". See whether an Exchange security group is present: pic.twitter.com/RR5QpzrreM

— Andy Robbins (@_wald0) January 31, 2019