ported the lab to ludus. https://www.sans.org/webcasts/intro-kerberos-common-ad-privesc-attacks-empire/
https://logout.gitbook.io/ad-privesc-with-empire