Active Directory (AD) Terminology
We validate this area during scoped assessments, documenting impact and remediation guidance.
Why it matters
- Domain Controller (DC) – A server managing authentication and directory services. - AMSI (Antimalware Scan Interface) – A Windows security feature that helps applications and services detect malicious content by scanning data in real-time. - ETW (Event Tracing for Windows) – A Windows framework for collecting and logging system events and performance data, often used for troubleshooting and monitoring. - Global Catalog (GC) – A DC storing a partial replica of all objects in a forest. - Kerberos – The default authentication protocol in AD. - LDAP (Lightweight Directory Access Protocol) – Used to query and modify AD objects. - NTLM (NT LAN Manager) – A legacy authentication protocol still used in some environments. - Group Policy Objects (GPOs) – Used to enforce security settings and configurations. - SID (Security Identifier) – A unique identifier assigned to AD objects. - ACL (Access Control List) – Defines permissions on objects. - SPN (Service Principal Name) – Identifies services for Kerberos authentication. - Golden Ticket – A forged Kerberos Ticket Granting Ticket (TGT) allowing persistence. - Silver Ticket – A forged Kerberos Service Ticket for lateral movement. - Pass-the-Hash (PtH) – Using NTLM hash instead of a plaintext password for authentication. - Pass-the-Ticket (PtT) – Using stolen Kerberos tickets to access systems. - LSASS (Local Security Authority Subsystem Service) – Manages authentication and can be dumped for credentials. - DCSync – A technique to extract password hashes by simulating a domain controller. - – A tool for mapping AD relationships and attack paths. - System Block Logging – Refers to recording events or actions at the block level within a system, often for auditing, security, or recovery purposes. - System-Wide Transaction – A process that ensures consistency and integrity across multiple system components or services, often used in distributed systems or databases to ensure that all parts of a transaction complete successfully. - iex (Invoke-Expression) – Executes a string as a PowerShell expression or command. - iwr (Invoke-WebRequest) – Sends HTTP requests to a web server and retrieves the response. - Constrained Delegation – Allows a service to impersonate a user only for specific services, enhancing security by limiting access. - Unconstrained Delegation – Allows a service to impersonate a user for any service in the domain, which can pose security risks.
How we test it
Our operators follow a structured checklist for this topic, adapted to your API surface and authentication model.
Testing approach
- Structured validation of Active Directory (AD) Terminology during scoped assessment.
- Evidence captured with reproducible steps for your engineering team.
What we look for
- Misconfigurations and control gaps related to Active Directory (AD) Terminology.
- Exploitable paths that could affect confidentiality, integrity, or availability.
Related topics
| Topic | Summary |
|---|---|
| Active Directory (AD) - Basics Understanding | Within Active Directory, there are three built-in groups that comprise the highest privilege groups in the director |
| DLL | A DLL (Dynamic Link Library) is a file format used in Microsoft Windows environments to contain code, data, and resources that can be used by multiple programs simultaneously. DLLs help modularize applications, allowing them to share common functions without duplicating code acr… |
| Extended Active Directory (AD) Terminology | We validate this area during scoped assessments, documenting impact and remediation guidance. |
| I. Active Directory Enumeration | We validate this area during scoped assessments, documenting impact and remediation guidance. |
| II. Local Privilege Escalation | We validate this area during scoped assessments, documenting impact and remediation guidance. |
| III. Domain Privilege Escalation | We validate this area during scoped assessments, documenting impact and remediation guidance. |