Video, abstract, & slides from @horse and my "AD & DNS: A Match Made in Heck" talk at BSidesCharm are online: https://www.hub.trimarcsecurity.com/post/ad-dns-a-match-made-in-heck
In the talk we cover some history of AD + DNS = ADIDNS, how AD relies on DNS, how ADIDNS relies on AD, some old ADIDNS abuses, some newer issues, a borrowed abuse affecting Kerberoa, and the announcement of our new BlueTuxedo tool to discover ADIDNS issues and help resolve them.