12 pages
AD Ops & Methodology
How an engagement actually runs: the kill-chain arc, situational awareness, C2/pivoting and staying quiet.
Page Kind Tags Updated
Red-Team AD Methodology
the operational kill-chain
Situational Awareness
post-foothold AD recon
AD Enumeration Cheat-Cards
from a Linux operator host
C2 & Pivoting in AD
operating from the foothold
Pivoting & Tunneling
the operator-side plumbing
Defense Evasion for AD Tooling
EDR / AMSI / ETW
OPSEC Tradecraft for AD Ops
operating without tripping the SOC
BloodHound Collection OPSEC
quiet SharpHound tradecraft
Ticket & Credential Handling
engagement hygiene
Foothold playbook
you hold X → do Y next
AD/Kerberos error decoder
failure → cause → fix
Ticket & credential manipulation cheat-sheet
kirbi/ccache/PtT
12 pages in this section