← All Lessons
Premium
FoundationalActive Directory
Kerberos Delegation Concepts
Kerberos delegation lets a service prove it is acting on a user's behalf when it calls a second service, and Active Directory implements that idea three different ways. This lesson builds the shared mental model behind unconstrained, constrained, and resource-based constrained delegation so you understand why each one exists before studying how attackers abuse them.
Sign in or upgrade to unlock the full premium library.
What you'll learn
- Delegation
- Unconstrained delegation
- Constrained delegation
- Resource-based constrained delegation (RBCD)
- Delegation direction of trust
What premium includes
- All 68 lessons: AD techniques, professional skills, each with interview answers and study kits
- Complete study kit for every lesson: quizzes, flashcards, and briefs
- Every learning track with full structured progression
- All 12 attack paths: full compromise walkthroughs for interviews and reports
- New lessons and attack paths added regularly
