You know active directory? It's basically a graph of objects, accounts and computers all with their own complex permissions and relationships. During pentests i

You know active directory? It's basically a graph of objects, accounts and computers all with their own complex permissions and relationships. During pentests it's VERY common to use a tool called bloodhound which imports an active directory graph into neo4j. You then use graph algorithms to find miss configuration and paths to traverse to become domain admin, which pretty much always reveals something "unexpected". https://github.com/BloodHoundAD/BloodHound https://github.com/BloodHoundAD/BloodHound