Walk-through of Orcus machine from VulnHub

Persistence techniques and Desired State Configuration

A long form, multi path example of Active Directory exploitation using several techniques

A broad-ranging overview of Active Directory enumeration with PowerView

Overview of Kerberoasting, and examples of use

A little bit about payloads, PoshC2