Active Directory Attack Paths I See Most Often

Kerberoasting and AS-REP roasting still work more often than they should. This post walks through the AD misconfigurations I encounter most frequently across internal engagements, in the order I typically find and exploit them. I include practical detection and hardening guidance for each attack path — written for blue teams, not just red team operators.