From the initial foothold, enumerate the internal network. - Attempt to exploit vulnerabilities identified during assessment: - Kerberoast service accounts and crack their password hashes offline. - Exploit misconfigured network shares to access sensitive data. - Leverage unpatched internal services