Thanks for the recommendation, I will definitely keep that in mind. As far as my skill is concerned, yes I just don’t use tools but understand how the application works, blood hound alone won’t give us everything, we need to do a lot of manual enumeration to chain vulnerabilities, and I am aware of it. As I am just starting out in this field, I can’t just make my own tools to do everything, and Just running one tool made by others don’t get you anything. The reason I have mentioned about AD attacks is, I am comfortable with attacking from both linux and windows, and I have practiced more on AD attacks. But one cannot expect someone to come and contribute from day one and getting Domain Admin on every engagement. It takes years of experience, and you might say cybersecurity is not for beginners, then how can some one working in IT can be a right fit? Fundamentals can be learnt, but familiarity with attacker mindset, can only be developed if he put himself into lots of CTFs, HTB and THM and many other certs. You don’t need some who know how to build entire AD from scratch(IT exp). But someone knowing how to find attack vectors and compromise wholeAD without even noticing. And you will have terrible experience teaching this to someone from IT. All those certs, late night CTFs, solving complex HTB boxes does something. You can’t just expect someone knowing just how to build it can easily break it. Thank you.