Penetration testing focused on Microsoft Windows environments: exploitation of Active Directory vulnerabilities, local privilege escalation, lateral movement via SMB/WMI/PowerShell, abuse of GPOs and trust relationships, Kerberos attacks (Golden/Silver Ticket, Kerberoasting), and bypassing Windows Defender and AppLocker.