Identity

Identity triage connects authentication to the actions that follow.

• Authentication triage
• Active Directory
• Common AD attacks

Identity + source + authentication method + target + follow-on action