Active Directory security

CISA published the exact attack chain its red team used against two infrastructure operators, and only one SOC caught it. Here’s how to turn that into a test plan.