Access Token Manipulation: SID-History Injection

Hello All,

I am trying to design a use-case for above technique. I have followed the below link [https://adsecurity.org/?p=1772](https://adsecurity.org/?p=1772) to execute the mimikatz 2.2 tool to perform sid-history injection and checked any event id 4765 , 4766 is getting generated in my AD but unfortunately MISC::AddSid module is not found in mimikatz 2.2.

I am not sure but I heard that sid history injection won't be able to perform in windows server 2016 and above.

Please let me know is …

access access token hello history injection malware manipulation server sid token windows windows server