About this document
Active Directory Attack and Defense Guide by Ricardo is a document available to read on EtoBox.
The document discusses common attacks against and defenses for Active Directory. It describes how attackers can escalate privileges from a domain user to domain administrator through techniques like mining SMB shares for credentials, using Mimikatz to dump passwords from memory, cracking Kerberos tickets, and creating persistent "Golden Tickets". The document recommends defenses such as separate admin workstations, complex randomized local admin passwords, and restricting SYSVOL access.
- Author
- Ricardo
- Language
- EN