# aditya160803/kerberos-ad-red-team-defense-lab architecture

> Architecture diagram of the GitHub repository aditya160803/kerberos-ad-red-team-defense-lab, generated by GitDiagram from its file tree, README and a sample of source files (last updated 2026-09-26). It is an AI-made overview: check details against the source.

- Interactive diagram: https://gitdiagram.com/aditya160803/kerberos-ad-red-team-defense-lab
- Repository: https://github.com/aditya160803/kerberos-ad-red-team-defense-lab

## Overview

This repository documents an isolated Active Directory lab and a Kerberos-focused attack-to-defense assessment lifecycle; it does not contain lab automation or runtime application code in the sampled material. The principal workflow runs from lab setup and reconnaissance through attack simulation, persistence checks, evidence analysis, and remediation. The graph follows the lifecycle documented in the README and maps major capabilities to their documentation paths. Source-code wiring could not be assessed because no runtime source was provided.

Main entry points: [`docs/attack-simulation/phase-10-final-assessment.md`](https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/attack-simulation/phase-10-final-assessment.md) (Final assessment), [`docs/attack-simulation/phase-09-validation-analysis.md`](https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/attack-simulation/phase-09-validation-analysis.md) (Evidence analysis), [`docs/lab-setup/index.md`](https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/lab-setup/index.md) (Lab setup), [`docs/attack-simulation/phase-01-reconnaissance.md`](https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/attack-simulation/phase-01-reconnaissance.md) (Reconnaissance)

## Diagram (Mermaid)

```mermaid
flowchart TD

subgraph group_lab["Lab Context"]
  node_lab_setup["Lab setup<br/>[index.md]"]
  node_kerberos["Kerberos fundamentals<br/>[fundamentals.md]"]
  node_introduction["Project overview<br/>[introduction.md]"]
end

subgraph group_simulation["Attack Simulation"]
  node_recon["Reconnaissance"]
  node_asrep["AS-REP roasting"]
  node_kerberoast["Kerberoasting"]
  node_privilege["Privilege assessment"]
  node_evasion["Defense evasion"]
  node_defender["Defender testing"]
  node_lateral["Lateral movement"]
  node_persistence["Persistence verification"]
end

subgraph group_evidence["Evidence Analysis"]
  node_evidence_review["Evidence analysis"]
  node_detection_sources["Detection evidence<br/>[index.md]"]
  node_evidence_index["Evidence index<br/>[evidence-index.md]"]
end

subgraph group_defense["Assessment &amp; Defense"]
  node_attack_chain["Attack-chain synthesis<br/>[overview.md]"]
  node_attack_path["Attack path<br/>[attack-path.md]"]
  node_techniques["ATT&amp;CK coverage"]
  node_assessment["Final assessment"]
  node_risk["Risk assessment<br/>[risk-assessment.md]"]
  node_findings["Security findings"]
  node_remediation["Defense remediation<br/>[index.md]"]
  node_limitations["Project limitations<br/>[limitations.md]"]
end

node_operator(("Lab operator"))

node_operator -->|"prepares lab"| node_lab_setup
node_lab_setup -->|"provides context"| node_kerberos
node_operator -->|"performs assessment"| node_recon
node_recon -->|"progresses to"| node_asrep
node_asrep -->|"progresses to"| node_kerberoast
node_kerberoast -->|"progresses to"| node_privilege
node_privilege -->|"progresses to"| node_evasion
node_evasion -->|"progresses to"| node_defender
node_defender -->|"progresses to"| node_lateral
node_lateral -->|"progresses to"| node_persistence
node_persistence -->|"followed by"| node_evidence_review
node_evidence_review -->|"informs"| node_assessment
node_evidence_review -->|"analyzes"| node_detection_sources
node_evidence_review -->|"indexes evidence"| node_evidence_index
node_assessment -->|"synthesizes"| node_attack_chain
node_assessment -->|"documents"| node_attack_path
node_assessment -->|"maps techniques"| node_techniques
node_assessment -->|"classifies risk"| node_risk
node_assessment -->|"records findings"| node_findings
node_assessment -->|"guides"| node_remediation
node_assessment -->|"states limits"| node_limitations

click node_lab_setup "https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/lab-setup/index.md"
click node_kerberos "https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/kerberos/fundamentals.md"
click node_introduction "https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/project/introduction.md"
click node_recon "https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/attack-simulation/phase-01-reconnaissance.md"
click node_asrep "https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/attack-simulation/phase-02-asrep-roasting.md"
click node_kerberoast "https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/attack-simulation/phase-03-kerberoasting.md"
click node_privilege "https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/attack-simulation/phase-04-privilege-escalation.md"
click node_evasion "https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/attack-simulation/phase-05-defense-evasion.md"
click node_defender "https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/attack-simulation/phase-06-defender-testing.md"
click node_lateral "https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/attack-simulation/phase-07-lateral-movement.md"
click node_persistence "https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/attack-simulation/phase-08-detection-evidence.md"
click node_evidence_review "https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/attack-simulation/phase-09-validation-analysis.md"
click node_detection_sources "https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/detection-evidence/index.md"
click node_evidence_index "https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/appendix/evidence-index.md"
click node_attack_chain "https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/attack-chain/overview.md"
click node_attack_path "https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/attack-chain/attack-path.md"
click node_techniques "https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/attack-chain/techniques-coverage.md"
click node_assessment "https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/attack-simulation/phase-10-final-assessment.md"
click node_risk "https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/assessment/risk-assessment.md"
click node_findings "https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/assessment/security-findings.md"
click node_remediation "https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/defense-remediation/index.md"
click node_limitations "https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/project/limitations.md"

classDef toneNeutral fill:#f8fafc,stroke:#334155,stroke-width:1.5px,color:#0f172a
classDef toneBlue fill:#dbeafe,stroke:#2563eb,stroke-width:1.5px,color:#172554
classDef toneAmber fill:#fef3c7,stroke:#d97706,stroke-width:1.5px,color:#78350f
classDef toneMint fill:#dcfce7,stroke:#16a34a,stroke-width:1.5px,color:#14532d
classDef toneRose fill:#ffe4e6,stroke:#e11d48,stroke-width:1.5px,color:#881337
classDef toneIndigo fill:#e0e7ff,stroke:#4f46e5,stroke-width:1.5px,color:#312e81
classDef toneTeal fill:#ccfbf1,stroke:#0f766e,stroke-width:1.5px,color:#134e4a
class node_lab_setup,node_kerberos,node_introduction toneBlue
class node_recon,node_asrep,node_kerberoast,node_privilege,node_evasion,node_defender,node_lateral,node_persistence toneAmber
class node_evidence_review,node_detection_sources,node_evidence_index toneMint
class node_attack_chain,node_attack_path,node_techniques,node_assessment,node_risk,node_findings,node_remediation,node_limitations toneRose
class node_operator toneIndigo
```

## Components

### Lab Context

- [Lab setup](https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/lab-setup/index.md): `docs/lab-setup/index.md`
- [Kerberos fundamentals](https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/kerberos/fundamentals.md): `docs/kerberos/fundamentals.md`
- [Project overview](https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/project/introduction.md): `docs/project/introduction.md`

### Attack Simulation

- [Reconnaissance](https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/attack-simulation/phase-01-reconnaissance.md): `docs/attack-simulation/phase-01-reconnaissance.md`
- [AS-REP roasting](https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/attack-simulation/phase-02-asrep-roasting.md): `docs/attack-simulation/phase-02-asrep-roasting.md`
- [Kerberoasting](https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/attack-simulation/phase-03-kerberoasting.md): `docs/attack-simulation/phase-03-kerberoasting.md`
- [Privilege assessment](https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/attack-simulation/phase-04-privilege-escalation.md): `docs/attack-simulation/phase-04-privilege-escalation.md`
- [Defense evasion](https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/attack-simulation/phase-05-defense-evasion.md): `docs/attack-simulation/phase-05-defense-evasion.md`
- [Defender testing](https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/attack-simulation/phase-06-defender-testing.md): `docs/attack-simulation/phase-06-defender-testing.md`
- [Lateral movement](https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/attack-simulation/phase-07-lateral-movement.md): `docs/attack-simulation/phase-07-lateral-movement.md`
- [Persistence verification](https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/attack-simulation/phase-08-detection-evidence.md): `docs/attack-simulation/phase-08-detection-evidence.md`

### Evidence Analysis

- [Evidence analysis](https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/attack-simulation/phase-09-validation-analysis.md): `docs/attack-simulation/phase-09-validation-analysis.md`
- [Detection evidence](https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/detection-evidence/index.md): `docs/detection-evidence/index.md`
- [Evidence index](https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/appendix/evidence-index.md): `docs/appendix/evidence-index.md`

### Assessment & Defense

- [Attack-chain synthesis](https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/attack-chain/overview.md): `docs/attack-chain/overview.md`
- [Attack path](https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/attack-chain/attack-path.md): `docs/attack-chain/attack-path.md`
- [ATT&CK coverage](https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/attack-chain/techniques-coverage.md): `docs/attack-chain/techniques-coverage.md`
- [Final assessment](https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/attack-simulation/phase-10-final-assessment.md): `docs/attack-simulation/phase-10-final-assessment.md`
- [Risk assessment](https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/assessment/risk-assessment.md): `docs/assessment/risk-assessment.md`
- [Security findings](https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/assessment/security-findings.md): `docs/assessment/security-findings.md`
- [Defense remediation](https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/defense-remediation/index.md): `docs/defense-remediation/index.md`
- [Project limitations](https://github.com/aditya160803/kerberos-ad-red-team-defense-lab/blob/master/docs/project/limitations.md): `docs/project/limitations.md`

### Other components

- **Lab operator**

## Connections

- Lab operator → Lab setup: prepares lab
- Lab setup → Kerberos fundamentals: provides context
- Lab operator → Reconnaissance: performs assessment
- Reconnaissance → AS-REP roasting: progresses to
- AS-REP roasting → Kerberoasting: progresses to
- Kerberoasting → Privilege assessment: progresses to
- Privilege assessment → Defense evasion: progresses to
- Defense evasion → Defender testing: progresses to
- Defender testing → Lateral movement: progresses to
- Lateral movement → Persistence verification: progresses to
- Persistence verification → Evidence analysis: followed by
- Evidence analysis → Final assessment: informs
- Evidence analysis → Detection evidence: analyzes
- Evidence analysis → Evidence index: indexes evidence
- Final assessment → Attack-chain synthesis: synthesizes
- Final assessment → Attack path: documents
- Final assessment → ATT&CK coverage: maps techniques
- Final assessment → Risk assessment: classifies risk
- Final assessment → Security findings: records findings
- Final assessment → Defense remediation: guides
- Final assessment → Project limitations: states limits