Kerberos, BloodHound and the attack paths that keep working.
AD Fundamentals
Forests, domains, OUs, GPOs, trusts and LDAP structure.
Kerberos Attacks
Kerberoasting, AS-REP roasting, golden and silver tickets.
BloodHound & Enumeration
Collectors, cypher queries, mapping shortest paths.
Lateral Movement
Pass-the-hash, WMI, WinRM, DCOM and SMB execution.
Persistence & Defenses
DCSync, ACL abuse, detection and hardening guidance.