Active Directory

Active Directory is a software product developed by Microsoft for managing computational resources and entities (e.g. servers, computers, users) within an organization.

See

• adPEAS
• WADCom
• S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet.

Security

• authentication
• AD enumeration
• common attacks
  • Kerberos attacks
  • pass-the-hash (needs hash)
  • persistence via dcsync domain admin hash dump (requires domain admin)
• See Red Team Ops I
• cheat sheet

Hierarchy & Relationships

• domain controller
• objects
• domain
• tree
• forest
• OU
• groups
  • restricted group
• trust

Data & Configuration

• AD DS Data Store
• Group Policy Object
• schema

AD user types

• domain admin
• service account
• local administrator
• domain user

AD group types

• security group
  • default security groups
• distribution group

LDAP

• LDAP
• distinguished name