Apprenticeship

Eight weeks of hands-on Windows and Active Directory administration on the isolated lab. Build the environment correctly before you attack it.

Stand up the isolated network, DC01, DNS, and the first admin account.

Add member servers and clients. Understand replication, sites, and trusts.

Author, link, and audit Group Policy the way an enterprise would.

Provision shares, model NTFS + share ACLs, enable access-based enumeration.

Understand how Kerberos actually works before you attack it.

Stand up the blue-team side: log forwarding, dashboards, alert rules.

Introduce documented misconfigurations to make the lab attackable.

Freeze the environment for the red-team phase and document everything.