PNPT Notes

Active Directory

Keep internal enumeration notes, users, groups, shares, BloodHound paths, ACLs, and domain escalation workflow here.

Notes

AD Working Notes

Import Notes

Checklist

AD Checklist

Enumerate hosts and naming convention Enumerate SMB shares Enumerate users and groups Build BloodHound graph / path review Check Kerberoasting opportunities Review ACL / delegation abuse paths Map lateral movement options Track domain controller compromise path

Focus

Key Areas

Host and service enumeration
Users, groups, shares, and permissions
BloodHound path analysis
Kerberoasting and ACL abuse
Lateral movement and DC path

Reminder

Documentation Tip

Track the attack path clearly as you go. Write down not just what worked, but why it worked and what it exposed.