Title	Tags
Account Operators	Active Directory Privilege Escalation Account Operators Credential Dumping LAPS Group Membership Abuse Evil-Winrm Powerview Windows Create User
AD Recycle Bin	Active Directory AD Recycle Bin Privilege Escalation Object Recovery Deleted Objects Restore Domain Controller Windows PowerShell
ADCS	Kerberos Pass-the-Ticket Certify Credential Dumping Ldap Pass-the-Hash Ticket Granting Ticket Domain Controller Certificate Services Active Directory Windows ADCS Pass-the-Cert Lookup SID
AddKeyCredentialLink	Shadow Credentials Pass-the-Cert AddkeyCredentialLink Active Directory Windows Whisker Pywhisker
AddMember	Powerview AddMember Domain Controller Active Directory Windows BloodyAD
AddSelf	Powerview Genericall AddMember Group Policy Domain Controller Addself Active Directory Windows BloodyAD
ADFS	SAML Token-Based Authentication ADFS Active Directory Windows Federation Services
ADIDNS	Domain ADIDNS ADDS DNS PowerMad DNS Posioning Spoofing Windows Active Directory
AllowedToDelegate	Pass-the-Ticket Silver Ticket Ticket Granting Ticket AllowedToDelegate Active Directory Windows AddAllowedtoAct AllowedToAct
Azure AD Connect	Azure AD Connect Secretsdump ADSync Password Active Directory Windows
Bloodhound	Bloodhound Sharphound Sliver Enumeration Active Directory Windows Neo4J DNS Dnschef Ldap Ldapsearch
Constrained Delegation	Credential Dumping Impacket Pass-the-Ticket Silver Ticket Ticket Granting Ticket Constrained Delegation Active Directory Windows RBCD KCD
Cross Session Relay	NTLM Pass-the-Hash Authentication Cross Session Relay Active Directory Windows Krbrelay Remotepotato0
Domain Trusts	Active Directory Privilege Escalation Domain Trusts Parent-Child Trust Kerberos Golden Ticket Mimikatz Rubeus Pass-the-Ticket Ticket Granting Ticket Credential Dumping Cross-Domain Attack Windows
ExecuteDCOM	Executedcom Active Directory Windows RCE
ForceChangePassword	Forcechangepassword Powerview Active Directory Windows BloodyAD
GenericAll	Shadow Credentials Powerview Credential Dumping AddMember Impacket Genericall Domain Controller Active Directory Windows
GenericWrite	Shadow Credentials Pass-the-Ticket Kerberoasting Genericwrite Powerview Asreproast Credential Dumping Ticket Granting Ticket Active Directory Windows Disabled Account
GetChanges/GetChangesAll	Dcsync Getchanges Getchangesall Secretsdump Active Directory Windows
Kerberoasting	Kerberos Impacket Kerberoasting Asreproast Rubeus Domain Controller Active Directory Windows GetNPUsers
Kerberos	Kerberos Pass-the-Ticket Hash Cracking Rubeus Password Cracking Sliver Enumeration NTLM SMB Kerbrute Pass-the-Hash Impacket Ticket Granting Ticket Domain Controller Active Directory Windows Krb5 Keytab SSSD
KrbRelayUp	KrbRelayUp Active Directory Local Privilege Escalation Kerberos Relay LDAP Signing Shadow Credentials ADCS Web Enrollment RBCD S4U2Self SCMUACBypass
Krbrelayx	Dns Spoofing Krbrelayx Dnstools Active Directory Windows DNS NTLM
LDAP	Kerberos Ldap Nmap Ldap Search Enumeration Active Directory Windows Nxc Ldapmodify Ldif Permissions
LDAP Relay	Attack Chain NTLM Ldap Pass-the-Hash Impacket NTLM Replay Petitpotam Active Directory Windows WebDAV Ticket Granting Ticket RBCD Secretsdump
Machine Account	Kerberos Credential Dumping Pass-the-Ticket Rubeus Ticket Granting Ticket Domain Controller Machine Account Microsoft Virtual Account Active Directory Windows
NetExec (nxc)	Ldap Crackmapexec Rid Brute Force SMB Ldap Search Enumeration Domain Controller Nxc Active Directory Windows Winrm
NTLM Relay Attack	Shadow Credential NTLM Ldap Pass-the-Hash Impacket NTLM Replay Petitpotam Active Directory Windows ADCS WebDAV Pkinit Ticket Granting Ticket
Pre-Windows 2000 Computer	Domain Controller Pre-Windows 2000 Computer Active Directory Windows Pre2k Pre-Created Computer STATUS_PASSWORD_MUST_CHANGE
RBCD Attack	Pass-the-Ticket Pass-the-Hash Silver Ticket Ticket Granting Ticket Active Directory Windows RBCD Resource-Based Constrained Delegation S4U Impersonate Credential Dumping Genericall WriteAccountRestrictions SPN-Less
ReadGMSAPassword	Credential Dumping ReadGMSApassword Gmsadumper Active Directory Windows
ReadLAPSPassword	Credential Dumping Powerview ReadLAPSpassword Active Directory Windows LAPS
RPC	Impacket Domain Controller Nxc Active Directory Windows Enumeration SID
SCCM	SCCM System Center Configuration Manager Active Directory Windows Configuration Management
Secrets Dump	SAM SYSTEM SECURITY Dcsync Impacket Secretsdump Domain Controller Credential Dumping Active Directory Windows NTDS.DIT Hive LAPS
SeEnableDelegationPrivilege	SeEnableDelegationPrivilege Pass-the-Ticket Service Ticket Ticket Granting Ticket Constrained Delegation Active Directory Windows KCD Secretsdump Unonstrained Delegation
Silver Ticket	Pass-the-Ticket SID Rubeus Ticket Granting Ticket Silver Ticket Sidhistory Domain Controller Active Directory Windows GetUserSPNs
Time Roasting	NTP Hash Cracking Time Roasting Enumeration Domain Controller Active Directory Windows
Unconstrained Delegation	Pass-the-Ticket S4U Ticket Granting Ticket Unconstrained Delegation Active Directory Windows PsExec
Windows Services	Server Operators Active Directory Windows Privilege Escalation Services Reverse Shell Unquoted Service Path
Winrm from Windows VM	Kerberos Pass-the-Ticket Domain Http File Transfer Authentication Ticket Granting Ticket Domain Controller Winrm Pssession Windows File Transfer Active Directory
WriteDacl	Writedacl Dcsync Powerview Credential Dumping Active Directory Windows
WriteOwner/Own	WriteOwner Permissions Powerview Impacket AddMember Domain Controller Active Directory Windows Dacledit Own
WriteSPN	WriteSPN Targeted Kerberoast Domain Controller Active Directory Windows