Detecting AD Attacks | Notion
DCSync
Kerberoasting
Pass-the-Hash (PtH)
Pass-the-Ticket (PtT)
Overpass-the-Hash
Golden Ticket
Silver Ticket
DCSHADOW
AS-REPRoasting
Skeleton Key
NTLM Relay Attacks
LLMNR / NBT-NS Poisoning
Credential Dumping (General)
Attacker Targets in Active Directory Environments
Putting It All Together: AD Attack Scenario