Fungal forays through the networkΒΆ

Active Directory and Kerberos are what these rooms mostly work on, which connects them to the lateral movement and name resolution runbooks in Tradecraft and to the trust-collapse model in Patches.

Even the deepest roots rot when Kerberos tickets go stale.