01 AD Attack #16 — Constrained Delegation Abuse (S4U2Proxy) 2026-08-10 02 AD Attack #2 — Kerberoasting 2026-08-10 03 AD Attack #20 — GenericWrite Abuse 2026-08-10 04 AD Attack #21 — WriteDACL Abuse 2026-08-10 05 AD Attack #25 — Shadow Credentials Attack (msDS-KeyCredentialLink) 2026-08-10 06 AD Attack #3 — AS-REP Roasting 2026-08-10 07 AD Attack #37 — DCSync Attack 2026-08-10 08 AD Attack #39 — NTDS.dit Extraction and Dumping 2026-08-10 09 AD Attack #4 — Pass-the-Hash (PtH) 2026-08-10 10 AD Attack #49 — Abusing Backup Operators Group 2026-08-10 11 AD Attack #5 — Pass-the-Ticket (PtT) 2026-08-10 12 AD Attack #54 — PsExec Remote Execution via SMB 2026-08-10 13 AD Attack #56 — RDP Lateral Movement and Hijacking 2026-08-10 14 AD Attack #58 — WMI Lateral Movement 2026-08-10 15 AD Attack #6 — Overpass-the-Hash (Pass-the-Key) 2026-08-10 16 AD Attack #62 — DSRM Backdoor Abuse 2026-08-10 17 AD Attack #67 — ADCS Certificate-Based Persistence 2026-08-10 18 AD Attack #68 — Cross-Domain Trust Abuse (SID History) 2026-08-10 19 AD Attack #69 — Forest Trust Abuse Cross-Forest Ticket Forging 2026-08-10 20 AD Attack #7 — NTLM Relay Attacks 2026-08-10 21 AD Attack #70 — ADCS Cross-Domain Enrollment 2026-08-10 22 AD Attack #73 — gMSA Password Extraction 2026-08-10 23 AD Attack #8 — LLMNR NBT-NS mDNS Poisoning 2026-08-10 24 AD Certipy-ad 2026-08-10 25 AD ESC1 — SAN Specification in Template 2026-08-10 26 AD ESC14 — Weak Explicit Certificate Mapping 2026-08-10 27 CRYPTO Hashing & Hash Identification 2026-08-09 28 AD Kerberoasting — Local On-Host 2026-08-10 29 NIX macOS-ISO-to-USB 2026-08-10 30 AD PERSIST1 — Active User Credential Theft via Certificates 2026-08-10 31 AD THEFT2 — User Certificate Theft via DPAPI 2026-08-10 32 AD THEFT5 — NTLM Theft via PKINIT (UnPAC-the-Hash) 2026-08-10