Belette Timorée's blog post
Soaphound.py - Another way of collecting AD objects from Linux - ADWS
Blog Archive
Abusing WSUS with MITM to perform ADCS ESC8 attack
Blog Archive