> For the complete documentation index, see [llms.txt](https://jotter.gitbook.io/red-team/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://jotter.gitbook.io/red-team/active-directory.md).

# Active Directory

- [Initial Access](https://jotter.gitbook.io/red-team/active-directory/initial-access.md)
- [Anonymous Authentication](https://jotter.gitbook.io/red-team/active-directory/initial-access/anonymous-authentication.md)
- [Domain Attacks](https://jotter.gitbook.io/red-team/active-directory/initial-access/domain-attacks.md)
- [Protocol Poisoning and Coercion](https://jotter.gitbook.io/red-team/active-directory/initial-access/protocol-poisoning-and-coercion.md)
- [NTLM Relay](https://jotter.gitbook.io/red-team/active-directory/initial-access/ntlm-relay.md)
- [AD Certificate Services](https://jotter.gitbook.io/red-team/active-directory/ad-certificate-services.md)
- [Enumeration](https://jotter.gitbook.io/red-team/active-directory/ad-certificate-services/enumeration.md)
- [Certificate Authentication](https://jotter.gitbook.io/red-team/active-directory/ad-certificate-services/certificate-authentication.md)
- [Post-Exploitation](https://jotter.gitbook.io/red-team/active-directory/post-exploitation.md)
- [LSASS and SAM](https://jotter.gitbook.io/red-team/active-directory/post-exploitation/lsass-and-sam.md)
- [Kerberos Tickets](https://jotter.gitbook.io/red-team/active-directory/post-exploitation/kerberos-tickets.md)
- [DPAPI, Browser Cookies, and CredMan](https://jotter.gitbook.io/red-team/active-directory/post-exploitation/dpapi-browser-cookies-and-credman.md)
- [Pivoting to Entra](https://jotter.gitbook.io/red-team/active-directory/post-exploitation/pivoting-to-entra.md)
- [Other Targets](https://jotter.gitbook.io/red-team/active-directory/post-exploitation/other-targets.md)