Title	Tags
Azure AD Connect	Azure AD Connect Secretsdump ADSync Password Active Directory Windows
Unconstrained Delegation	Pass-the-Ticket S4U Ticket Granting Ticket Unconstrained Delegation Active Directory Windows Psexec
Abuse Parent Child Domain Trusts	Kerberos Pass-the-Ticket Rubeus Domain Trust Golden Ticket Silver Ticket Credential Dumping Trust Relationship Mimikatz Pass-the-Hash Ticket Granting Ticket Domain Controller Active Directory Windows
Account Operators	Credential Dumping AddMember Account Operators Active Directory Windows LAPS
AD Recycle Bin	Domain Controller AD Recycle Bin Active Directory Windows
ADCS	Kerberos Pass-the-Ticket Certify Credential Dumping Ldap Pass-the-Hash Ticket Granting Ticket Domain Controller Certificate Services Active Directory Windows ADCS Pass-the-Cert
AddKeyCredentialLink	Shadow Credentials Pass-the-Cert AddkeyCredentialLink Active Directory Windows Whisker Pywhisker
AddMember	Powerview AddMember Domain Controller Active Directory Windows BloodyAD
AddSelf	Powerview Genericall AddMember Group Policy Domain Controller Addself Active Directory Windows BloodyAD
ADFS	SAML Token-Based Authentication ADFS Active Directory Windows Federation Services
ADIDNS	Domain ADIDNS ADDS DNS PowerMad DNS Posioning Spoofing Windows Active Directory
AllowedToDelegate	Pass-the-Ticket Silver Ticket Ticket Granting Ticket Allowedtodelegate Active Directory Windows
Bloodhound	Bloodhound Sharphound Sliver Enumeration Active Directory Windows Neo4J
Constrained Delegation	Credential Dumping Impacket Pass-the-Ticket Silver Ticket Ticket Granting Ticket Constrained Delegation Active Directory Windows RBCD
Cross Session Relay	Ntlm Pass-the-Hash Authentication Cross Session Relay Active Directory Windows Krbrelay Remotepotato0
ExecuteDCOM	Executedcom Active Directory Windows RCE
ForceChangePassword	Forcechangepassword Powerview Active Directory Windows BloodyAD
GenericAll	Shadow Credentials Powerview Credential Dumping AddMember Impacket Genericall Domain Controller Active Directory Windows
GenericWrite	Shadow Credentials Pass-the-Ticket Kerberoasting Genericwrite Powerview Asreproast Credential Dumping Ticket Granting Ticket Active Directory Windows
GetChanges/GetChangesAll	Dcsync Getchanges Getchangesall Secretsdump Active Directory Windows
Kerberoasting	Kerberos Impacket Kerberoasting Asreproast Rubeus Domain Controller Active Directory Windows GetNPUsers
Kerberos	Kerberos Pass-the-Ticket Hash Cracking Rubeus Password Cracking Sliver Enumeration Ntlm Smb Kerbrute Pass-the-Hash Impacket Ticket Granting Ticket Domain Controller Active Directory Windows
Krbrelayx	Dns Spoofing Krbrelayx Dnstools Active Directory Windows DNS Ntlm
LDAP	Kerberos Ldap Nmap Ldap Search Enumeration Active Directory Windows Nxc
Machine Account	Kerberos Credential Dumping Pass-the-Ticket Rubeus Ticket Granting Ticket Domain Controller Machine Account Microsoft Virtual Account Active Directory Windows
NetExec (nxc)	Ldap Crackmapexec Rid Brute Force Smb Ldap Search Enumeration Domain Controller Nxc Active Directory Windows Winrm
NTLM Relay Attack	Shadow Credentials Attack Chain Ntlm Ldap Pass-the-Hash Impacket Ntlmreplay Petitpotam Active Directory Windows ADCS Webdav Pkinit Ticket Granting Ticket
RBCD Attack	Pass-the-Ticket Pass-the-Hash Silver Ticket Ticket Granting Ticket Active Directory Windows RBCD Resource-Based Constrained Delegation S4U Impersonate Credential Dumping
ReadGMSAPassword	Credential Dumping ReadGMSApassword Gmsadumper Active Directory Windows
ReadLAPSPassword	Credential Dumping Powerview ReadLAPSpassword Active Directory Windows LAPS
RPC	Impacket Domain Controller Nxc Active Directory Windows Enumeration SID
SCCM	SCCM System Center Configuration Manager Active Directory Windows Configuration Management
secretsdump	Sam Dcsync Impacket Domain Controller Credential Dumping Active Directory Windows Ntds.Dit Hive Nxc
Silver Ticket	Pass-the-Ticket SID Rubeus Ticket Granting Ticket Silver Ticket Sidhistory Domain Controller Active Directory Windows GetUserSPNs
Windows Services	Server Operators Active Directory Windows Privilege Escalation Services Reverse Shell Unquoted Service Path
Winrm from Windows VM	Kerberos Pass-the-Ticket Domain Http File Transfer Authentication Ticket Granting Ticket Domain Controller Winrm Pssession Windows File Transfer Active Directory
WriteDacl	Writedacl Dcsync Powerview Credential Dumping Active Directory Windows
WriteOwner/Own	Writeowner Permissions Powerview Impacket AddMember Domain Controller Active Directory Windows Dacledit