Cloud security stays and falls with the Active Directory. The session focuses on several relatively unknown yet extremely sensitive security settings of Active Directory which, in case of misconfiguration or misunderstanding, pose a severe threat to the whole forest environment and may, if exploited, enable the real internal hac