finding-validation

Use when validating an Active Directory finding before client or management delivery, or when triaging BloodHound edges, Kerberoast lists, or AD CS template visibility for false positives. Covers seven-question gates, AD-specific KILL/DOWNGRADE rules, narrative severity, and optional MITRE ATT&CK mapping. Improves pentest report defensibility.