Attacking And Defending Active Directory: AD Pentesting