Dia 1 – Xpert – Gerardo Mejía (CR) – No CVE, No Problem: Uncovering Hidden Attack Paths in Active Directory