• Introduction to Active Directory Enumeration & Attacks
• Tools of the Trade
• Scenario

Initial Enumeration

• Initial Enumeration of the Domain

Sniffing out a Foothold

• LLMNR/NBT-NS Poisoning - from Linux
• LLMNR/NBT-NS Poisoning - from Windows

Sighting In, Hunting For A User

• Password Spraying Overview
• Enumerating & Retrieving Password Policies
• Password Spraying - Making a Target User List

Spray Responsibly

• Internal Password Spraying - from Linux
• Internal Password Spraying - from Windows