01 ADAttack #16 — Constrained Delegation Abuse (S4U2Proxy) 2026-08-1002 ADAttack #2 — Kerberoasting 2026-08-1003 ADAttack #20 — GenericWrite Abuse 2026-08-1004 ADAttack #21 — WriteDACL Abuse 2026-08-1005 ADAttack #25 — Shadow Credentials Attack (msDS-KeyCredentialLink) 2026-08-1006 ADAttack #3 — AS-REP Roasting 2026-08-1007 ADAttack #37 — DCSync Attack 2026-08-1008 ADAttack #39 — NTDS.dit Extraction and Dumping 2026-08-1009 ADAttack #4 — Pass-the-Hash (PtH) 2026-08-1010 ADAttack #49 — Abusing Backup Operators Group 2026-08-1011 ADAttack #5 — Pass-the-Ticket (PtT) 2026-08-1012 ADAttack #54 — PsExec Remote Execution via SMB 2026-08-1013 ADAttack #56 — RDP Lateral Movement and Hijacking 2026-08-1014 ADAttack #58 — WMI Lateral Movement 2026-08-1015 ADAttack #6 — Overpass-the-Hash (Pass-the-Key) 2026-08-1016 ADAttack #62 — DSRM Backdoor Abuse 2026-08-1017 ADAttack #67 — ADCS Certificate-Based Persistence 2026-08-1018 ADAttack #68 — Cross-Domain Trust Abuse (SID History) 2026-08-1019 ADAttack #69 — Forest Trust Abuse Cross-Forest Ticket Forging 2026-08-1020 ADAttack #7 — NTLM Relay Attacks 2026-08-1021 ADAttack #70 — ADCS Cross-Domain Enrollment 2026-08-1022 ADAttack #73 — gMSA Password Extraction 2026-08-1023 ADAttack #8 — LLMNR NBT-NS mDNS Poisoning 2026-08-1024 ADCertipy-ad 2026-08-1025 ADESC1 — SAN Specification in Template 2026-08-1026 ADESC14 — Weak Explicit Certificate Mapping 2026-08-1027 CRYPTOHashing & Hash Identification 2026-08-0928 ADKerberoasting — Local On-Host 2026-08-1029 NIXmacOS-ISO-to-USB 2026-08-1030 ADPERSIST1 — Active User Credential Theft via Certificates 2026-08-1031 ADTHEFT2 — User Certificate Theft via DPAPI 2026-08-1032 ADTHEFT5 — NTLM Theft via PKINIT (UnPAC-the-Hash) 2026-08-10