6.3 Obtain and validate a more useful domain identity Credentials and identity changes

AD cheatsheet | §6 — Chapter 6

Select the numbered section matching the current investigation. Baselines, alternatives, interpretations and conditional receiving sections are kept underneath it.

• §6.3.1 — Interpret password policy before credential validation
• §6.3.2 — Classify recovered credentials and their scope
• §6.3.3 — AS-REP roasting — conditions and output
• §6.3.4 — Kerberoasting — selection and output
• §6.3.5 — Select a credential source on a controlled host
• §6.3.6 — Inspect Kerberos tickets and compatible use
• §6.3.7 — Choose a permission-backed identity transition
• §6.3.8 — Validate LAPS and gMSA read access
• §6.3.9 — Validate domain replication rights
• §6.3.10 — Select an AD CS, delegation or GPO branch
• §6.3.11 — Complete identity-transition methods