Looking for insight/experience on PAM solutions from an offensive perspective

Hello,

As the title says, I'm trying to gather some insight to PAMs (such as Thycotic and CyberArk) from the perspective of red teamers/pentesters. Google hasn't turned up much in the way of blogs or writeups.

Our company is in talks with a vendor to implement this type of software, and I'm not seeing eye-to-eye with the reps. They claim it will mitigate most common AD attacks against privileged accounts, but I'm struggling to see how exactly it will mitigate …

cybersecurity experience insight pam solutions