Cyberlium

Active › Module 2 › Lesson 4

BeginnerModule 2Lesson 4/5

Lab — Structure

Pack forest/domain/OU, users/groups/GPO, and trust cards — structure map from $LAB_AD only.

25 min+40 XP3 quiz
Module progress4 of 5

Visual · t25_structure_lab

Lab: structure pack. $LAB_AD only. Original Cyberlium.

Opening

Structure pack ties hierarchy to identity — paperwork before Kerberos module.

Lessons 2-1–2-3 named forest/domain/OU, users/groups/GPO, and trusts. This lab merges structure table, identity card, and trust notes into one $LAB_AD map artifact. No LDAP export from stranger domains — classification paperwork only. Next: Quiz — AD Structure Literacy.

1. Lab contract: structure pack

Create $HOME/cyberlium-lab/t25-m02-l04-structure-lab.txt merging hierarchy table, users/groups/GPO card, and trust notes with lab forest name and date.

Optional: ASCII or exported diagram from YOUR lab docs — redact any out-of-scope FQDNs.

Command guide

Try these commands — Lab contract: structure pack

═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)

DNS for AD — https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/plan/active-directory-integrated-dns-zones (SRV records literacy) Microsoft Kerberos ports — https://learn.microsoft.com/en-us/windows-server/security/kerberos/kerberos-authentication-overview (port 88 context) CISA AD — https://www.cisa.gov/resources-tools/resources/active-directory-security-best-practices

═══ INSTALL ═══

Linux (Debian/Ubuntu):

Command — copy this

sudo apt install dnsutils

macOS:

Command — copy this

brew install bind

Windows: Built-in: nslookup (or install BIND for dig)

═══ LINUX / macOS ═══

Command — copy this

source "$HOME/cyberlium-lab/t25-ad/lab.env" 2>/dev/null || export LAB_AD_HOST=${LAB_AD_HOST:-127.0.0.1}
export LAB_AD=${LAB_AD:-$HOME/cyberlium-lab/t25-ad}
grep never "$LAB_AD/roe.txt"

Optional command

dig SRV records against YOUR lab DNS only — set LAB_AD_DOMAIN in lab.env

Command — copy this

dig +short _ldap._tcp.dc._msdcs.${LAB_AD_DOMAIN:-lab.local} 2>/dev/null || dig +short @"$LAB_AD_HOST" _ldap._tcp.dc._msdcs.${LAB_AD_DOMAIN:-lab.local} 2>/dev/null || echo 'Set LAB_AD_HOST/LAB_AD_DOMAIN to YOUR lab DC'

═══ WINDOWS ═══

YOUR lab-joined machine only

Command — copy this

nslookup -type=srv _ldap._tcp.dc._msdcs.lab.local

Primary tools to practice this lesson: dig, grep. Reference sites: DNS for AD (https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/plan/active-directory-integrated-dns-zones); Microsoft Kerberos ports (https://learn.microsoft.com/en-us/windows-server/security/kerberos/kerberos-authentication-overview); CISA AD (https://www.cisa.gov/resources-tools/resources/active-directory-security-best-practices). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.

2. Cross-check refusal boundaries

Grep pack for production FQDNs, real employee names, secretsdump output — redact or delete. Structure stays documentary.

Update map if lab AD is rebuilt — note snapshot date.

3. Lock the proof

chmod 600 on the pack. Quiz next — then Kerberos Literacy.

Structure naming feeds ticket and SPN lessons in M3.

4. What you ship: AD structure pack for $LAB_AD

Merged hierarchy, identity, trust sections. $LAB_AD named. NO stranger exports. chmod 600.

5. What you record before the next lesson

Date. Structure pack path. $LAB_AD named. File t25-m02-l04-structure-lab.txt chmod 600.

6. Wrong vs right: stranger-domain attacks vs lab AD literacy

Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.

  • Wrong

    Include production LDAP dump in pack. Skip trust section on multi-domain GOAD.

  • Right

    Write YOUR structure pack for $LAB_AD. chmod 600. Next: Quiz — AD Structure Literacy.

Mission: freeze YOUR structure pack

1) Merge M2 literacy sections. 2) Confirm zero production/stranger FQDNs. 3) Note lab snapshot date. 4) chmod 600.

Stuck? Ask Cyberlium AI Mentor

One page of structure beats ten pages of unauthorized enum.

Knowledge Check

1

APPLY: This lab requires:

Multiple choice

Knowledge Check

2

APPLY: True or False: Structure pack should name YOUR lab forest FQDN.

True or False

Knowledge Check

3

APPLY: Structure pack should include:

Multiple choice

← Previous

Answer all 3 knowledge checks to continue. (0/3 answered)