Strange Active Directory Encounter

Short background: I work as a senior pentester (consulting, not internal) doing primarily network and assumed breach pentests for my clients.

The last few weeks I've been working an assumed breach test for a client and was able to privesc fairly quickly into the test. Nothing strange there, typical client AD weak/misconfigs.

While doing post-ex recon on the domain, I noticed something very strange when running BloodHound. Typically, the first thing I do after importing my collection zip …

active directory assumed breach breach client clients consulting cybersecurity directory doing internal network nothing pentester pentests privesc quickly recon test work working