#active-directory #enumeration #kerberoasting #password-spraying #llmnr-poisoning #acl-abuse #domain-trusts #lateral-movement #dcsync #red-team #pentest-reference