ad-overview

You can automate BloodHound data ingestion for Active Directory analysis by running the ad-overview skill, which imports and queries BloodHound data to map attack paths and identify vulnerabilities in your environment.

Yes, you can scan for ADCS ESC misconfigurations in Active Directory using this skill, which identifies and scans for misconfigured Active Directory Certificate Services Escrow vulnerabilities.

The best way to perform Kerberoasting and DCSync attacks during an audit is using this skill, which exploits Kerberos authentication weaknesses to obtain domain credentials and leverages replication rights to dump krbtgt hashes.

You can extract LAPS passwords in an Active Directory environment by utilizing this skill, which includes LAPS extraction tooling to retrieve local administrator passwords during security assessments.

Yes, you need BloodHound, Kerberoasting tools, ADCS scanning, DCSync, and LAPS tooling installed, as this skill requires these dependencies to execute a full attack chain on an Active Directory environment.

DCSync is an attack technique that leverages replication rights in Active Directory to dump krbtgt hashes, allowing security professionals to extract domain credentials during offensive and defensive audits.