How Attackers Become Domain Administrators in Active Directory—and How to Prevent It. An Overview of Attack Vectors, BSI-Compliant Hardening, and the AD Penetration Test.