Orange Cyberdefense’s mindmap is a large map for pentesting Active Directory, organised by what you already have: no credentials, a username, valid credentials, local admin, domain admin. Each branch lists the attack paths with ready-to-paste commands for CrackMapExec, Responder, Impacket, Certipy and Rubeus, which makes it a quite helpful cheat sheet during an internal assessment. Its main maintainer mayfly announced the v2022_11 upgrade, which adds KrbRelayUp, Certifried (CVE-2022-26923), CVE-2022-33679, ADCS ESC9 and ESC10, and more detail on RBCD, ACLs, relaying and lateral movement. If you would rather practise those paths than read about them, his Game of Active Directory lab write-ups walk through delegation attacks step by step.
