I had created a Demo on Azure ATP, that actually shows building an attack on Active Directory and Azure ATP in action.
In my view it is extremely powerful.
Please watch at,
https://www.youtube.com/watch?v=0B6JLJudi7A&t=7s
https://www.youtube.com/watch?v=XarWjtK9ONM&t=3150s
Hope you will find it useful,
Regards,
