Untitled.canvas

{
	"nodes":[
		{"id":"8a284bb13f3e22f9","type":"file","file":"active-directory/PowerShell Remoting.md","x":-20,"y":-440,"width":360,"height":60,"color":"#ffae00"},
		{"id":"97b16d51fdf23336","type":"file","file":"active-directory/User Hunting.md","x":-120,"y":-680,"width":320,"height":50,"color":"#ffc800"},
		{"id":"eff9fc58f2ab6486","type":"file","file":"active-directory/Lateral Movement.md","x":-180,"y":-140,"width":320,"height":50,"color":"#ffa200"},
		{"id":"77b8dd3df4246454","type":"file","file":"active-directory/Kerberoasting.md","x":440,"y":40,"width":260,"height":60,"color":"2"},
		{"id":"8bfe0baad4d87082","type":"text","text":"#persistence ","x":-160,"y":120,"width":250,"height":60,"color":"1"},
		{"id":"7c80f861f7428f54","type":"file","file":"active-directory/BloodHound.md","x":-880,"y":-540,"width":240,"height":51,"color":"3"},
		{"id":"1cea69a554d2793b","type":"file","file":"active-directory/LPE.md","x":-380,"y":-518,"width":160,"height":58,"color":"3"},
		{"id":"d752e5ae683cc2af","type":"file","file":"active-directory/PowerShell.md","x":-600,"y":-300,"width":220,"height":60,"color":"3"}
	],
	"edges":[
		{"id":"6426e1ac6e42c247","fromNode":"8a284bb13f3e22f9","fromSide":"bottom","toNode":"eff9fc58f2ab6486","toSide":"top","color":"4","label":"Invoke-Command"},
		{"id":"a343761e10328ca0","fromNode":"97b16d51fdf23336","fromSide":"bottom","toNode":"8a284bb13f3e22f9","toSide":"top","color":"4","label":"Found Sessions"},
		{"id":"79d0cfbe438ec51e","fromNode":"eff9fc58f2ab6486","fromSide":"bottom","toNode":"8bfe0baad4d87082","toSide":"top","color":"4","label":"MimiKatz"},
		{"id":"863c280123fb3191","fromNode":"eff9fc58f2ab6486","fromSide":"right","toNode":"77b8dd3df4246454","toSide":"left","color":"4","label":"Credentials extracted"},
		{"id":"fb330f564d2cccd6","fromNode":"77b8dd3df4246454","fromSide":"right","toNode":"8a284bb13f3e22f9","toSide":"right","color":"4","label":"Login Using Password"},
		{"id":"0c2d7b599c4275eb","fromNode":"eff9fc58f2ab6486","fromSide":"left","toNode":"8bfe0baad4d87082","toSide":"left","color":"4","label":"OPTH"},
		{"id":"e1309b0fde054ef0","fromNode":"8bfe0baad4d87082","fromSide":"right","toNode":"8a284bb13f3e22f9","toSide":"right","color":"4","label":"Domain Admin"},
		{"id":"7a92b6908f92681d","fromNode":"d752e5ae683cc2af","fromSide":"top","toNode":"1cea69a554d2793b","toSide":"left","color":"4","label":"Then"},
		{"id":"643ba16433a3180b","fromNode":"1cea69a554d2793b","fromSide":"right","toNode":"97b16d51fdf23336","toSide":"left","color":"4","label":"Got Admin"},
		{"id":"33175a0269442005","fromNode":"d752e5ae683cc2af","fromSide":"right","toNode":"8a284bb13f3e22f9","toSide":"left","fromEnd":"arrow","color":"5","label":"Bypass Detection"},
		{"id":"9ddd96f3037e76c1","fromNode":"d752e5ae683cc2af","fromSide":"left","toNode":"7c80f861f7428f54","toSide":"bottom","color":"4","label":"Get Admin privileges"}
	]
}