Please watch Azure Advanced Threat Protection Demo, this demo shows a real time Active Directory Attack and Azure ATP in action. It covers,
DNS Reconnaissance Attack
OverPass –The Hash to Kerberos TGT (Ticket Granting Ticket)
Access Resource through TGT
Domain Escalation (Steal Privileged Identity)
Access Domain Controller Resources using Domain Escalation
Domain Dominance Attack by utilizing Skeleton Key (Master Password
https://www.youtube.com/watch?v=0B6JLJudi7A
https://www.youtube.com/watch?v=XarWjtK9ONM
