Over the past few years, I have had the opportunity to assist various organizations in detecting and removing attackers from large enterprises. Throughout these efforts, I have noticed that remediation of this condition is a difficult and technically challenging task. As a result, I decided to take this on as a challenge and develop a generalized framework for recovering Active Directory after compromise by targeted attack as my final project for my master’s degree.

