https://sudonull.com/acl-in-active-directory-ace-types-and-control-rights
Breakdown of 22 ACE types, ACCESS_MASK, extended rights and validated writes in AD. For middle/senior developers: inheritance, flags, bypassing checks. Study the security mechanics.