Active Directory Exploitation Techniques

From the study guide

Course Outline

  1. Active Directory fundamentals
  2. AS-REP roasting
  3. Kerberoasting
  4. GPO abuse and detection
  5. DCSync attack
  6. Golden Ticket attacks
  7. Kerberos delegation abuse
  8. RPC coercion attacks

1. Active Directory fundamentals

Key Concepts & Definitions

  • Active Directory: A directory service for Windows enterprise environments that centralizes management and provides authentication, authorization, and related directory functions.
  • LDAP: A network protocol used for systems to communicate with Active Directory so clients can query and receive directory information from domain controllers.
  • Domain Controller: A server role that administers an Active Directory domain and provides authentication and authorization with the highest authority within its directory environment.
  • NTDS.DIT: An Active Directory data-store database file stored by domain controllers in %SystemRoot%\NTDS that holds directory information for users and services.
  • Organizational Unit: A logical container in Active Directory used to organize users, groups, computers, and other OUs for permissioning and policy targeting.

Essential Points

Read the full study guide →

Practice quiz preview

1. What is Active Directory in a Windows enterprise environment?

2. What does NTDS.DIT store on a domain controller?

3. What condition must be present for AS-REP roasting to work against a user account?

Take the quiz (11 questions) →

Flashcard preview

Active Directory — role?

Centralized management and authentication for Windows networks.

AS-REP roasting — purpose?

Extracts crackable hashes from accounts with preauth disabled.

Active Directory Definition

Directory service centralizing management and authentication

LDAP Protocol Purpose

Enables communication between systems and Active Directory

Domain Controller Role

Manages domain and handles authentication and authorization

NTDS.DIT File

Stores directory data for Active Directory

See all 11 flashcards →

Frequently asked questions

What does the Active Directory Exploitation Techniques study guide cover?

It covers the core concepts of Active Directory Exploitation Techniques, organized by topic with the key definitions, explanations and takeaways, so it's easier to learn and remember.

Read the full study guide →

How many questions are in the Active Directory Exploitation Techniques quiz?

The practice quiz has 11 multiple-choice questions, each with an explanation. Use it to check what you know and find your gaps.

Take the quiz (11 questions) →

How do I study Active Directory Exploitation Techniques with flashcards?

There are 11 flashcards on Active Directory Exploitation Techniques, with a question on the front and the answer on the back. Try to recall each answer before you flip, and let spaced repetition bring back the ones you miss.

See all 11 flashcards →

Related classes

Turn your own class notes into a study guide

Upload a PDF or paste your notes. Revizly writes a study guide, a practice quiz and flashcards in about a minute.