Security assessment of Active Directory infrastructure to identify misconfigurations, excessive privileges, obsolete accounts, risky trust relationships, and attack vectors like Kerberoasting, Pass-the-Hash, Golden Ticket, DCSync. Includes analysis of Group Policy, delegation, forest trust, Domain Controller hardening, and compliance with Microsoft baselines and identity security frameworks.