Hardening Larch Systems' Active Directory, the keys to the kingdom: the tiered admin model with domain controllers, AD and PKI in Tier 0, servers in Tier 1 and workstations in Tier 2, and admins never logging on below their tier; an attack path from a phished workstation through kerberoasting a service account and unconstrained delegation to Domain Admin, closed at every hop; and detection of RC4 ticket spikes and a DCSync attempt from a non-domain-controller, with a tested forest recovery plan.

CY-MID-047Mid Level · Active Directory Security

Active Directory Security — The AD Defense Board

A hands-on mid-level course that hardens Active Directory - the keys to the kingdom. Work the AD defense board - eight domains: Accounts, Privilege Tiering, Kerberos, Delegation, GPO & Config, Trusts, Detection, and Recovery - closing the paths attackers use to reach Domain Admin. Grounded in Microsoft's tiered-admin model; strictly defensive. Four hands-on activities in every lesson.

15 hours8 chapters32 lessons225 activities8 labs

What you'll learn

Harden accounts and enforce a clean privilege-tiering model.
Close Kerberos and delegation abuse paths (kerberoasting, unconstrained delegation).
Secure GPOs, trusts, and configuration against escalation.
Detect AD attacks and plan a forest recovery.

Price:৳8,000