Active Directory

Assessment guides for directory discovery, trusts, Kerberos, delegation, privileged control, and lateral access. Begin with bounded read-only inventory, then validate only the paths authorized by the rules of engagement.

Open the Kerberos section for ticket flow, delegation models, S4U concepts, SPN mapping, and service references.