https://adsecurity.org/

Attack Methods for Gaining Domain Admin Rights in Active Directory

https://adsecurity.org/?p=2362