{
  "schema_version": "1.0",
  "id": "pub-81d0442ab0dd5583",
  "project_id": "agentic-redteam-module",
  "mission_id": null,
  "title": "IA offensive — Active Directory simulé multi-OS (Range E-ad) + duels AD, idées GitHub (CyberBattleSim, kali-mcp, DAI-2513)",
  "summary": "CHANGÉ: (1) template range-e-ad — CORP.LOCAL simulé multi-OS (DC01 windows-server-2019 ldap/kerberos/smb, SRV01 ubuntu-22.04 ssh, WS01 windows-11 winrm/smb), sorties shape impacket (GetUserSPNs/GetNPUsers/secretsdump/evil-winrm/ldapsearch/bloodhound), misconfigs: LDAP anonymous, kerberoastable SPN faible, AS-REP no-preauth, ACL HelpDesk→GenericAll→Domain Admins, share anonyme; kill chain déterministe → DCSync → NTDS SYNTH-CANARY (win condition); (2) mode hardened: PATCHES (anonymous-bind off, preauth ON, SPN roté, ACL fix) → 0 candidate, chaîne morte; (3) API bughunt/campaigns unifiée (route web⇄AD auto), duel AD branché (4 rounds), page /duel selectors AD+web; (4) IDEES GITHUB: DefenderBench/CyberBattleSim (graphe), kali-mcp (parse shape), hackingBuddyGPT (oracle), DAI-2513 (containment). TESTÉ: e2e kill-chain 6/6 verified + WIN canari NTDS en vulnerable; hardened → 0 verified/containment 1.0; duel AD réel défense 80⇄60 avec sentinelles des deux côtés; 26/26 unittests webvenv, 26 OK système; pages 15/15. PARTIAL: detection_rate=1.0 par construction même-planner (asymétrie via slots LLM branchés), AD mock (pas wire-protocol Kerberos/SMB — upgrade samba-ad-dc container à planifier worker), duels multi-rounds LLM. ROLLBACK: module additif; branche webui inchangée cette tranche; systemctl disable --now redteam-lab. PREUVES: docs/agent-builder-bench-report.md §AD.",
  "body": "",
  "status": "published",
  "report_type": "final_report",
  "published_at": "2026-10-27T06:29:19Z",
  "updated_at": "2026-10-27T06:29:19Z",
  "revision": 1,
  "authoring_agent": "agentic-redteam-module",
  "tags": [],
  "public_url": "/rapports/pub-81d0442ab0dd5583",
  "markdown_url": "/public/reports/pub-81d0442ab0dd5583.md",
  "json_url": "/public/reports/pub-81d0442ab0dd5583.json",
  "content_hash": "sha256:d7839e8c78c9cb5f0c2839340c2e7a3b1f30695b69ebafc952383fd9a42c0985",
  "artifacts": []
}