ActiveDirectory

• Detecting shadow credentials Mar 21

• After the storm - how to move on with NTLM Sep 24
• Abusing Kerberos S4U2self for local privilege escalation Jun 26