README
AD intermediate track (F2.04-I)
After F2.04-B (Active→Sauna/Forest): structured domain enum + Kerberos attacks — before relay/ACL/ADCS encyclopedias.
| Step | What |
|---|---|
| 00 | This page |
| 01 | Map |
| 02 | AI5 Recon & enum [Intermediate] |
| 03 | AI6 Kerberos [Intermediate] |
| 04 | Labs — Medium AD |
| Later | Operator AI7–8 (relay / ACL / ADCS) · tradecraft AD shelf |
Prerequisite: local Windows comfort (F2-B or F2-I) + AD beginner boxes.