AD Object Security Permissions
In an Active Directory implementation, all elements such as users,
computers, or groups are objects with an associated set of access permissions,
not unlike permissions associated with files on a local file system.
If AD permissions are set incorrectly, we may be able to exploit them
to perform privilege escalation or lateral movement within the domain.
In the following sections, we’ll discuss these securable object permissions
and demonstrate how to enumerate and exploit them.