Active Directory protection
Pen Testing Active Directory Series
Part I: Introduction to crackmapexec (and PowerView) Part II: Getting Stuff Done With PowerView Part III: Chasing Power Users Part IV: Graph Fun Part V: Admins and Graphs Part VI: The Final Case