
NEW: LIVE TRAINING CLASSES NOW INCLUDE AN EXAM ATTEMPT READ MORE
Master Active Directory Security: Defend Your Network Against Advanced Attacks
One of the most common tools to structure and organize users and computers in a business environment is Microsoft’s Active Directory. However, Active Directory also happens to be one of the most exploited tools that hackers utilize to gain access to corporate networks.
This live Active Directory training class will not only teach you the most common exploits hackers use to break into networks, it will also teach you the steps that you need to take to remediate and patch these exploits. You’ll gain practical skills and knowledge that can be immediately applied to secure your environment.
The Hacking and Defending Active Directory training includes an exam voucher for the Practical Junior Penetration Tester (PJPT) certification. Each exam voucher includes 1 exam attempt and is valid for 12 months from the class completion date.
This class is limited to 50 students.
System Requirements
- 8GB RAM & 256GB HDD
- Up-to-Date OS & Internet Browser
- Stable Internet connection
Prerequisites
This is a beginner level class, but students should have basic knowledge of computers and networking. CompTIA A+/Net+/Sec+ knowledge equivalent will prepare you to take this class.

Live, Instructor-Led
Hacking (and Defending) Active Directory Live Training
Next Class Begins
Friday, September 19th, 2025
Details
8+ Hours of Live Online Instruction and CEU Credits
25+ Hours of On-Demand Training (6 Months Access)
1 PJPT Exam Attempt (12 Months Access)
Online Labs w/ Access Post Training
Private Cohort and Instructor Access
24/7/365 Course Support (Lifetime)
Who Should Take the Hacking and Defending Active Directory Live Training?
Hacking and Defending Active Directory is an excellent class for both defensive and offensive security personnel.
- System Administrators and IT Professionals
- Network Engineers and Administrators
- Organizations that require their teams to be proficient in Active Directory security to protect against cyber threats.
- Aspiring Penetration Testers and Cybersecurity Professionals
- Individuals looking for extra guidance as they study for the PJPT.
- Anyone looking to advance their knowledge, skills, and methodologies
What Our Students Are Saying
Why Choose TCM Security Instructor-Led Training?
No Fluff, Practical Focus
You’ll walk away with hands-on knowledge and practical skills that can be immediately applied in real-world scenarios.
Lab Access
After the training ends, you have 50 hours of access to online virtual labs to practice what you learned.
Interactive, Small Group Setting
We limit our class sizes to 50 students to encourage interaction with the instructor and classmates. You’ll have access to a private Discord channel for class communication and networking.
Post-Training Resources
You’ll have 6 months of access to on-demand training materials after the training ends.
Professional Development
TCM Security live trainings are eligible for Continuing Education Unit (CEU) credits.
Prepare for Certification Exams
Intensive live training classes will prepare you for TCM Security Certifications and include a certification voucher related to the training.
Training Options for Organizations
The cybersecurity field is always evolving and learning never stops. TCM’s Live Training options will equip your employees with practical, hands-on skills that they can immediately put to use on the job. We offer bulk discounts for organizations looking to purchase multiple seats in our live training classes. We can also conduct private group session training. Please reach out to us using the form if you are interested in learning more about those options!
“What I learned in just one day of Hacking (and Defending) Active Directory training has given me the edge on how to help my customers better secure their environments.”
Curriculum and Agenda
Prerequisites
This is a beginner level class, but students should have basic knowledge of computers and networking. CompTIA A+/Net+/Sec+ knowledge equivalent will prepare you to take this class.
Live Active Directory Training Schedule
Live Training Session – Friday, September 19, 2025
Active Directory Overview
- What is Active Directory?
- Physical Active Directory Components
- Logical Active Directory Components
Pre-Compromise AD Attacks and Defenses
- LLMNR Poisoning Attacks and Defenses
- SMB Relay Attacks and Defenses
- IPv6 Attacks and Defenses
- AS-REP Roasting Attacks and Defenses
- Passback Attacks and Defenses
- Inside the Attacker’s Mindset
Post-Compromise AD Enumeration
- Reviewing common enumeration tools, such as: Bloodhound, Plumhound, Pingcastle, ldapdomaindump, and much more
- Understanding common mistakes from an Administrator’s perspective
Post-Compromise AD Attacks and Defenses
- Pass Attacks and Defenses
- Kerberoasting Attacks and Defenses
- Token Impersonation Attacks and Defenses
- URL File Attacks and Defenses
- GPP Attacks and Defenses
- Credential Dumping Attacks and Defenses
- Persistence Attacks and Defenses
- Inside the Attacker’s Mindset – Revisited
AD Case Studies
- Real case studies from real pentests AKA “How they got owned”
*Curriculum is dependent on class skillset and other varying factors. Curriculum may change at the instructor’s discretion.
Request Live Training Reimbursement
Training doesn’t stop once you land a pentesting position. If your company offers a training budget or reimbursement for continuing education, consider using it on TCM Security live training and certifications! To make things easier, we’ve created a Training Budget Request Template—a customizable document designed to align your learning goals with your company’s objectives. Be sure to follow your company’s policies and procedures to increase the likelihood of your request being approved.
Frequently Asked Questions
What skill level should I have to take the training?
This class is aimed at beginners, meaning that you should have a general background in computers and networking, but extensive security experience is not required to succeed. Completion of any A+/Net+ course or equivalent knowledge is more than enough.
How long is the training session?
The class runs for 8 hours starting at 9am and ending at 5pm ET. This includes lecture, hands-on labs, an hour lunch, and breaks to work on the challenges.
What certification is included?
This training prepares you for the Practical Junior Penetration Tester (PJPT) certification exam. Your purchase includes 12 months of access to the training materials and the exam attempt. Please note that certification vouchers purchased in a live training bundle do NOT include a free retake.
Do you offer any discounts?
Live trainings are not eligible for the student, educator, military, first responder discount because they are already discounted to include the certification voucher. We periodically offer sales and promotions. Join our email list or follow us on social media to be informed when sales begin.
Will my employer reimburse this training?
Maybe! If your organization has a training budget, this class is an excellent way to expand your security knowledge and gain knowledge that will help protect your organization’s data. Use our reimbursement template to help craft your training request to your manager.
Do you offer bulk discounts?
We do. If your organization would like to purchase several seats for your team members to participate in the training, please contact [email protected] for more information.
Do you offer private group sessions?
Yes, we can conduct private group sessions for your organization or team. Contact [email protected] to learn more about our offerings.