AD Expert

What you'll actually learn

This track picks up where a basic Active Directory setup stops being enough — multiple domains under one forest, the actual Kerberos ticket exchange happening behind every "it just works" login, and the GPO settings that decide whether a compromised workstation can pivot into a domain controller. Instead of clicking through wizards, you work through why a trust relationship can be abused, why ticket lifetimes matter, and what a real hardening baseline looks like.

What you'll be able to do

You'll be handed an AD environment with a plausible but dangerous misconfiguration — an overly trusting cross-forest relationship, a GPO that leaves an attack path open — and trace exactly how it could be exploited, then close it the way a real security-conscious admin would, not just by following a checklist someone else wrote.