Why DES and RC4 Still Matter in AD Crypto Discussions
Lab klist encryption types, supported-etype table, GPO ‘Configure encryption types allowed for Kerberos’ — inventory, not cracking.
Active-Directory
sAMAccountName Impersonation Class (CVE-2021-42278 / CVE-2021-42287)
Lab event 4742/4768 samples redacted, computer-account naming checks, patch verification — no noPac exploit.
Active Directory Recon Notes: What Enumerations Reveal
Fake lab DC ldapsearch and PowerView-style listings, 4662/1644/4624 event IDs — inventory, not an attack playbook.
Kerberos Constrained Delegation Map for Analysts
Lab klist and setspn dumps redacted, constrained-delegation allow-list map — no ticket forging, no S4U abuse.