Active Directory Infiltration Methods Employed by Cybercriminals – ASEC Report

This report summarizes Active Directory infiltration techniques used by threat actors, detailing reconnaissance (port scanning, net commands), AD enumeration and stealthy tooling (PowerView, AdFind), and attack-path mapping (BloodHound/SharpHound), and notes ASEC-observed exploitation and Ryuk’s use of AdFind; it emphasizes that compromising Domain Controllers or Domain Admins enables full domain compromise and that these tools can evade traditional defenses.