Active › Module 2 › Lesson 4
Lab — Structure
Pack forest/domain/OU, users/groups/GPO, and trust cards — structure map from $LAB_AD only.
Visual · t25_structure_lab
Lab: structure pack. $LAB_AD only. Original Cyberlium.
Opening
Structure pack ties hierarchy to identity — paperwork before Kerberos module.
Lessons 2-1–2-3 named forest/domain/OU, users/groups/GPO, and trusts. This lab merges structure table, identity card, and trust notes into one $LAB_AD map artifact. No LDAP export from stranger domains — classification paperwork only. Next: Quiz — AD Structure Literacy.
1. Lab contract: structure pack
Create $HOME/cyberlium-lab/t25-m02-l04-structure-lab.txt merging hierarchy table, users/groups/GPO card, and trust notes with lab forest name and date.
Optional: ASCII or exported diagram from YOUR lab docs — redact any out-of-scope FQDNs.
Command guide
Try these commands — Lab contract: structure pack
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
DNS for AD — https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/plan/active-directory-integrated-dns-zones (SRV records literacy) Microsoft Kerberos ports — https://learn.microsoft.com/en-us/windows-server/security/kerberos/kerberos-authentication-overview (port 88 context) CISA AD — https://www.cisa.gov/resources-tools/resources/active-directory-security-best-practices
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install dnsutils
macOS:
Command — copy this
brew install bind
Windows: Built-in: nslookup (or install BIND for dig)
═══ LINUX / macOS ═══
Command — copy this
source "$HOME/cyberlium-lab/t25-ad/lab.env" 2>/dev/null || export LAB_AD_HOST=${LAB_AD_HOST:-127.0.0.1}
export LAB_AD=${LAB_AD:-$HOME/cyberlium-lab/t25-ad}
grep never "$LAB_AD/roe.txt"Optional command
dig SRV records against YOUR lab DNS only — set LAB_AD_DOMAIN in lab.env
Command — copy this
dig +short _ldap._tcp.dc._msdcs.${LAB_AD_DOMAIN:-lab.local} 2>/dev/null || dig +short @"$LAB_AD_HOST" _ldap._tcp.dc._msdcs.${LAB_AD_DOMAIN:-lab.local} 2>/dev/null || echo 'Set LAB_AD_HOST/LAB_AD_DOMAIN to YOUR lab DC'═══ WINDOWS ═══
YOUR lab-joined machine only
Command — copy this
nslookup -type=srv _ldap._tcp.dc._msdcs.lab.local
Primary tools to practice this lesson: dig, grep. Reference sites: DNS for AD (https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/plan/active-directory-integrated-dns-zones); Microsoft Kerberos ports (https://learn.microsoft.com/en-us/windows-server/security/kerberos/kerberos-authentication-overview); CISA AD (https://www.cisa.gov/resources-tools/resources/active-directory-security-best-practices). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Cross-check refusal boundaries
Grep pack for production FQDNs, real employee names, secretsdump output — redact or delete. Structure stays documentary.
Update map if lab AD is rebuilt — note snapshot date.
3. Lock the proof
chmod 600 on the pack. Quiz next — then Kerberos Literacy.
Structure naming feeds ticket and SPN lessons in M3.
4. What you ship: AD structure pack for $LAB_AD
Merged hierarchy, identity, trust sections. $LAB_AD named. NO stranger exports. chmod 600.
5. What you record before the next lesson
Date. Structure pack path. $LAB_AD named. File t25-m02-l04-structure-lab.txt chmod 600.
6. Wrong vs right: stranger-domain attacks vs lab AD literacy
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
Include production LDAP dump in pack. Skip trust section on multi-domain GOAD.
Right
Write YOUR structure pack for $LAB_AD. chmod 600. Next: Quiz — AD Structure Literacy.
Mission: freeze YOUR structure pack
1) Merge M2 literacy sections. 2) Confirm zero production/stranger FQDNs. 3) Note lab snapshot date. 4) chmod 600.
Stuck? Ask Cyberlium AI Mentor
One page of structure beats ten pages of unauthorized enum.
Knowledge Check
APPLY: This lab requires:
Multiple choice
Knowledge Check
APPLY: True or False: Structure pack should name YOUR lab forest FQDN.
True or False
Knowledge Check
APPLY: Structure pack should include:
Multiple choice