20 pages

AD & Kerberos Fundamentals

The objects, protocols and stores an attacker reasons over: directory structure, Kerberos flow, NTLM, and where the secrets live.

Page Kind Tags Updated

Active Directory Structure

objects, OUs, domains, trees, forests, sites

concept active-directory, structure 06 Sept

Domain Controller & FSMO Roles

concept active-directory, domain-controller 06 Sept

directory protocol

concept protocol, ldap 06 Sept

Server Message Block

concept protocol, smb 06 Sept

Local Account Store

concept windows, credential-access 06 Sept

concept active-directory, credential-access 06 Sept

Local Security Authority Subsystem Service

concept windows, credential-access 06 Sept

Service Accounts vs Machine Accounts

concept active-directory, accounts 06 Sept

Service Principal Name

concept kerberos, active-directory 06 Sept

Kerberos Authentication

concept kerberos, active-directory 13 Jun

the two Kerberos tickets

concept active-directory, kerberos 06 Sept

Kerberos Pre-Authentication

concept kerberos, active-directory 06 Sept

Privilege Attribute Certificate

concept kerberos, active-directory 06 Sept

Kerberos Encryption Types

RC4 / AES128 / AES256

concept kerberos, active-directory 06 Sept

concept kerberos, active-directory 06 Sept

NTLM Authentication

concept ntlm, active-directory 06 Sept

Kerberos credential cache

concept kerberos, ccache 06 Sept

Group Managed Service Accounts

concept active-directory, service-accounts 06 Sept

Local Administrator Password Solution

concept active-directory, local-admins 07 Sept

AD Tiering Model

concept active-directory, architecture 06 Sept

20 pages in this section