A city still has legacy Windows hosts domain-joined with weak local controls. How should the tester treat them in an AD path assessment?
Select an answer to reveal the explanation.
Short Explanation
Old, soft workstations are the unlocked side doors into a modern office. Once inside, stolen creds and sessions open directory paths. Do not pretend only domain controllers count.
Full Explanation
Poorly controlled legacy domain members frequently provide initial access, local privilege, and credential material that feeds Active Directory escalation. They remain Kerberos participants when joined and healthy enough to authenticate. Excluding them from AD path analysis understates realistic attack chains. Assessments should prioritize hardening or isolation of such footholds.