GPO Abuse

LAPS abuse

Kerberoasting

Active Directory - Certificate Services

Kerberos Delegation

Cross Trust Attacks

Token Impersonation

URL File Attacks

GPP / cPassword Attacks

Account Operator Privilege Escalation

Backup Operator Privilege Escalation

AD Recycle Bin Group Membership

GenericWrite/GenericAll Abuse

WriteOwner Abuse

Shadow Credentials