Active Directory, network segmentation, and lateral movement — exploiting and defending enterprise infrastructure at scale.