Kerberoasting Attack Explained: From a Normal AD User to Domain Admin

A Kerberoasting attack turns a single low-privilege domain account into cracked service credentials, and often into Domain Admin. Here is the full chain and the fixes that actually work.
Read more

Red Team Diary: From a Single Phishing Email to Domain Admin in Six Days

A representative red team assessment, told day by day: how one convincing phishing email turned into domain admin in six days, and the three controls that would have stopped us cold.
Read more