22 pages
AD & Kerberos Fundamentals
The objects, protocols and stores an attacker reasons over: directory structure, Kerberos flow, NTLM, and where the secrets live.
Page Kind Tags Updated
Active Directory Structure
objects, OUs, domains, trees, forests, sites
Domain Controller & FSMO Roles
LDAP / LDAPS
directory protocol
SMB
Server Message Block
SAM Database
Local Account Store
NTDS.dit
AD Database
LSASS
Local Security Authority Subsystem Service
Credential Dumping
on-host secret stores overview
Service Accounts vs Machine Accounts
Service Principal Name
SPN
Kerberos Authentication
AD
TGT and TGS
the two Kerberos tickets
Kerberos Pre-Authentication
Kerberos PAC
Privilege Attribute Certificate
Kerberos Encryption Types
RC4 / AES128 / AES256
KRBTGT Account
NTLM Authentication
ccache
Kerberos credential cache
Group Managed Service Accounts
gMSA
LAPS
Local Administrator Password Solution
Kerberos Armoring
the pre-auth hardening
AD Tiering Model
Tier 0 / 1 / 2
22 pages in this section