And Sacha of Lyft was previously using similar techniques on the red team at Microsoft.
The awesome Bloodhound project productizes some of the red team use cases: https://github.com/BloodHoundAD/Bloodhound/wiki
Check our Readme; we definitely had to give a shout-out to BloodHound :-).
Check our Readme; we definitely had to give a shout-out to BloodHound :-).