Red team Active Directory networks

Perform offensive security testing on Active Directory environments

When you need to map Active Directory attack paths and identify privilege escalation vectors in an authorized pentest.

• · domain target
• · credential set or null-session flag

• · enumeration results (users, groups, delegation paths)
• · vulnerability report

• · BloodHound
• · PowerShell
• · Impacket tools

• · network access to DC or domain-joined system
• · testing authorization obtained

• · enumeration blocked by EDR
• · null-session disabled (requires creds)
• · trust relationships not enumerated

• · BloodHound integration for visual graph
• · Delegation and trust relation mapping