Real penetration testing stories from Active Directory engagements.
A helpdesk account. A seasonal password. A disabled account nobody remembered.
