01 AD Attack #11 — Golden Ticket Attack 2026-08-10 02 AD Attack #12 — Silver Ticket Attack 2026-08-10 03 AD Attack #13 — Diamond Ticket Attack 2026-08-10 04 AD Attack #14 — Sapphire Ticket Attack 2026-08-10 05 AD Attack #15 — Unconstrained Delegation Abuse 2026-08-10 06 AD Attack #21 — WriteDACL Abuse 2026-08-10 07 AD Attack #22 — WriteOwner Abuse 2026-08-10 08 AD Attack #24 — AllExtendedRights DCSync ACE Abuse 2026-08-10 09 AD Attack #26 — AdminSDHolder Persistence via ACL 2026-08-10 10 AD Attack #33 — ESC8 NTLM Relay to ADCS HTTP Endpoint 2026-08-10 11 AD Attack #34 — ESC11 NTLM Relay to ADCS RPC 2026-08-10 12 AD Attack #36 — Certifried (CVE-2022-26923) 2026-08-10 13 AD Attack #37 — DCSync Attack 2026-08-10 14 AD Attack #38 — DCShadow Attack 2026-08-10 15 AD Attack #39 — NTDS.dit Extraction and Dumping 2026-08-10 16 AD Attack #41 — PetitPotam (CVE-2021-36942) 2026-08-10 17 AD Attack #43 — PrintNightmare (CVE-2021-34527) 2026-08-10 18 AD Attack #53 — Exchange Windows Permissions (WriteDACL to DCSync) 2026-08-10 19 AD Attack #60 — Token Stealing and Impersonation 2026-08-10 20 AD Attack #64 — Golden Ticket Persistence 2026-08-10 21 AD Attack #65 — ACL Backdooring (Persistence via DCSync ACE) 2026-08-10 22 AD Attack #68 — Cross-Domain Trust Abuse (SID History) 2026-08-10 23 AD Attack #69 — Forest Trust Abuse Cross-Forest Ticket Forging 2026-08-10 24 AD Attack #73 — gMSA Password Extraction 2026-08-10 25 AD Attack #74 — Azure AD Connect Credential Extraction 2026-08-10 26 AD Attack #9 — mitm6 (IPv6 DNS Spoofing DHCPv6 Takeover) 2026-08-10 27 AD Certificate Persistence — Certifried (CVE-2022-26923) 2026-08-10 28 AD ESC8 — NTLM Relay to ADCS HTTP Web Enrollment 2026-08-10 29 AD PERSIST2 — Machine Account Persistence via Certificates 2026-08-10 30 AD THEFT3 — Machine Certificate Theft via DPAPI 2026-08-10