By attacking the domain controller, we can inject the identity of DC3$. Next, we will use the identity of DC3$ to export the hash of the domain administrator, dcadmin, using dcsync. （Translation note: The term "dcsync" is a common command used in Active Directory administration to synchronize domain controllers. It is typically used to export the hash of a domain administrator account, which can then be used for authentication purposes.） @Xiaonil