OwnsRaw

This edge is established from the principal that owns an object to the owned object. This edge is processed further to determine whether implicit owner rights (e.g., WriteDacl) are blocked, which may prevent the owner from compromising the destination object.

Edge Schema

Source: User, Group, Computer
Destination: AIACA, CertTemplate, Computer, Container, Domain, EnterpriseCA, Group, GPO, IssuancePolicy, NTAuthStore, OU, RootCA, User
Traversable: No

References

• SpecterOps: Do You Own Your Permissions, or Do Your Permissions Own You?
• Whitepaper: Owner or Pwnd?