Hacking & Defending Active Directory

About this course

See Active Directory through an attacker's eyes, then lock it down. You will learn AD structure, common pre- and post-compromise attacks, enumeration with tools such as BloodHound and PingCastle, and the defences that stop each technique.

What you'll learn

• Understand the structure and components of Active Directory, including both physical and logical elements
• Identify and defend against common pre-compromise Active Directory attacks such as LLMNR poisoning, SMB relay, IPv6 spoofing, AS-REP roasting, and passback attacks
• Use key post-compromise enumeration tools (e.g., BloodHound, PingCastle) to assess AD environments and recognize common administrative misconfigurations
• Analyze and defend against post-compromise attacks including Kerberoasting, token impersonation, credential dumping, and persistence techniques
• Adopt an attacker’s mindset to better anticipate and mitigate real-world AD exploitation tactics
• Apply lessons from real penetration test case studies to strengthen Active Directory security posture

Curriculum

Who it's for

System administrators, defenders and penetration testers.

Before you start

• This is a beginner level class, but students should have basic knowledge of computers and networking. CompTIA A+/Net+ knowledge equivalent or the free Practical Help Desk course in TCM Security Academy will prepare you to take this class.

Part of these Alalamia diplomas

• Alalamia Diploma in Ethical Hacking and Penetration Testing