Skip to main content
AD Academy

Learning tracks

Pick a role — topics go from basics to advanced. Read in any order; this is just a suggestion.

Helpdesk → Sysadmin

From password resets to running a stable domain.

0/14 read

  1. 1.Networking from zero: IP, Subnet, Gateway
  2. 2.Workgroup vs Domain
  3. 3.DNS — the heart of Active Directory
  4. 4.What is Active Directory?
  5. 5.Domains, Trees and Forests
  6. 6.Setting up the first Domain Controller
  7. 7.OU, groups and the AGDLP model
  8. 8.Password policy and Fine-Grained Password Policy
  9. 9.NTFS permissions vs Share permissions
  10. 10.Group Policy and Audit
  11. 11.Scope, Reservations and Options in DHCP
  12. 12.Sites, Subnets, and Replication
  13. 13.Backup and Restore of Active Directory
  14. 14.Standard Tools for AD Admins

SOC analyst

Spot attacks in logs and respond correctly.

0/13 read

  1. 1.What is Active Directory?
  2. 2.Kerberos — the Ticket System
  3. 3.NTLM — the old protocol that's still alive
  4. 4.Network Packet Anatomy — Where to look for an attacker
  5. 5.Important Event IDs in AD
  6. 6.Windows Event ID Map for the Analyst
  7. 7.Cyber Kill Chain and SIEM
  8. 8.Kerberoasting
  9. 9.Pass-the-Hash and Pass-the-Ticket
  10. 10.DCSync — «I am a Domain Controller too»
  11. 11.Honeypot Accounts and Canary Tokens
  12. 12.IR Process in Active Directory
  13. 13.Protecting access: Conditional Access, MFA and PIM

AD pentester

Understand attack paths — and how to close them.

0/16 read

  1. 1.LDAP — the Directory Access Protocol
  2. 2.Kerberos — the Ticket System
  3. 3.GOAD — Game of Active Directory
  4. 4.Reading the BloodHound graph — from user to Domain Admin
  5. 5.NTLM Relay and LLMNR — Impersonating Without Cracking
  6. 6.AS-REP Roasting
  7. 7.Kerberoasting
  8. 8.ACL Abuse in Active Directory
  9. 9.What is Delegation
  10. 10.Resource-Based Constrained Delegation (RBCD)
  11. 11.AD CS — ESC1–ESC8: Attacking the Certificate Authority
  12. 12.Shadow Credentials (msDS-KeyCredentialLink)
  13. 13.DCSync — «I am a Domain Controller too»
  14. 14.Golden Ticket and Silver Ticket
  15. 15.Diamond Ticket and Bronze Bit
  16. 16.Modern Defenses: LAPS, Credential Guard, MDI

FortiGate for beginners

The six core topics: from FortiOS to troubleshooting.

0/6 read

  1. 1.What are FortiGate and FortiOS?
  2. 2.Firewall policies and objects
  3. 3.NAT on FortiGate: SNAT and VIP
  4. 4.VPN: IPsec site-to-site and SSL VPN
  5. 5.Security profiles and SSL inspection
  6. 6.Logs and troubleshooting