BA Lab 11 – Attacking On-Premises DC using malicious RunBooks