infosecn1nja/AD-Attack-Defense resource

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

4858 stars · 1081 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

A curated knowledge base mapping the Active Directory attack kill chain to detection, mitigation, and prevention guidance. It catalogs attacker TTPs across discovery, privilege escalation, credential dumping, lateral movement, and persistence, with links to tools and reference articles for both red and blue teams.

Use cases

• learn active directory attack techniques
• find detection guidance for AD attacks
• prepare for red team engagements against AD
• build detection rules for credential dumping and lateral movement
• study post-exploitation tradecraft
• harden and defend an active directory environment

When to choose

• you need a reference map of AD attack TTPs with matching defenses
• you are training a security team on AD attack and detection
• you are planning or defending against AD-focused penetration tests

When to avoid

• you need runnable software rather than a curated link collection
• you need coverage of non-Windows or cloud-only identity environments
• you need step-by-step tutorials rather than curated references

Facets

learning-resource · maturity active

security penetration-testing developer-tools security penetration-testing awesome-lists cross-platform active-directory kill-chain red-team blue-team threat-detection curated-list post-exploitation

Member repositories

For agents

markdown · JSON · MCP: product_card(name="infosecn1nja/AD-Attack-Defense")