Blackwood Legal Breach

End-to-end purple-team scenario against a hardened mid-sized legal firm. After OSINT on the firm's partners and paralegals, a single AI-drafted spearphish delivers a Module Stomping loader onto a paralegal's workstation. The operator then chains five Active Directory misconfigurations to reach Domain Admin on the DC and identify the tenant trust anchor of the Entra Cloud Sync provisioning agent. Every load-bearing step exploits an AD delegation at the attribute level. No CVE is used.