Active directory book

[OS-547099]

Hello,

During my study of the chapter 21 concerning the "Active Directory Attack", I definitively realize my lack of knowledges on this subject; on its architecture it self at a basis level as well about its its associated authentification protocols such as NTLM and Kerberos.

For thoses reasons, I'm wondering if you know a book convering at least minimaly all theses topics?

Thanks,

[OS-80610]

There are AD books and Kerberos books (O'Reilly) that may have what you want. I can offer the following websites which may be complementary to the PDF material,

https://adsecurity.org/?page_id=4031

https://zer1t0.gitlab.io/posts/attacking_ad/

https://www.tarlogic.com/blog/how-kerberos-works/

[OS-549554]

Great list , Thanks

[OS-89346]

easiest way is to go on Microsoft docs and see the info you need there: https://docs.microsoft.com/en-us/win...omain-services , on the left you can navigate to different topics, also here is a book from Microsoft on Mitigating Pass the hash and others , there is a version 1 and 2: https://www.microsoft.com/en-us/down....aspx?id=36036 , they explain the attacks and how to mitigate but you can use all of these in reverse to see what protections you might find and need to bypass, what logs to delete etc ) finally, there are free rooms on TryHackMe where they also teach you concepts and then you can apply : https://tryhackme.com/room/activedirectorybasics, https://tryhackme.com/room/attackingkerberos

[OS-561369]

Actually, prior AD knowledge is needed when attending PEN-200.
I also attended PEN-200 without reading the prerequisite and find myself lacking the understanding of AD too. The AD material OffSec recommends is the microsoft manual of AD which can be found here:

https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/get-started/virtual-dc/active-directory-domain-services-overview

For further reference:

https://help.offensive-security.com/hc/en-us/articles/4406841351316-PEN-200-Onboarding-A-Student-Introduction-Guide-to-the-OSCP-adjusted-for-the-Training-Library-

[OS-551906]

i felt the same and how i did dealt with it is did setup a windows server 2019 and added 3 machines Vms ( windows 10 2 times and an ubuntu ) and to be honest did help a lot to understand the architecture behinde AD , so the best way is do the same and play with it and you will get undersatnd it better