This is a medium level view of what internal network offensive operations look like largely from a directory services and connected services perspective. It is designed to help defenders and pentesters think about threats, vulnerabilites, vectors and scopes.