Cyber Performing Active Directory Compromise Investigation
ASecurity
Investigate Active Directory compromise by analyzing authentication logs, replication metadata, Group Policy changes, and Kerberos ticket anomalies to identify attacker persistence and lateral movement paths.
Installs into .claude/skills of the current project.
Are you the author of Cyber Performing Active Directory Compromise Investigation?
Add the live security badge to your README. It updates with every re-scan.
[](https://www.skillsdirectory.com/skills/nexuslinkproductions-cyber-performing-active-directory-compromise-inves)
---
name: cyber-performing-active-directory-compromise-investigation
description: "Investigate Active Directory compromise by analyzing authentication logs, replication metadata, Group Policy changes, and Kerberos ticket anomalies to identify attacker persistence and lateral movement paths."
hide: true
---
<!-- GENERATED:YURI-CODEX-SKILL-ADAPTER:v1 -->
# YURI skill adapter
Authoritative source: `.claude/skills/cyber-performing-active-directory-compromise-investigation/SKILL.md`
Authoritative source SHA-256: `89253b3a17bd7a14020ab63e11180bbff99be1f0aea037278c4635a525a515ef`
Source class: `cyber-armed`
Before acting, read the authoritative source file above completely from beginning to end. If the governed source is absent, run `node _SYSTEM/Scripts/skill-recall.mjs --show cyber-performing-active-directory-compromise-investigation` and read its complete verified output. Follow that source as the skill body; this adapter is a non-authoritative metadata-and-pointer projection.
