4
Database Write Operation
•
1. Write to log
•
2. Write to memory
•
3. Confirm transaction
•
4. Write to Ntds.dit
Lsass.exe
Memory Cache
Log
Ntds.dit