The Kerberos Attack Chain
Kerberos is the CISSP topic that keeps paying: understand the protocol once and three attack classes fall into place behind it. This series walks the chain in order: how tickets actually work, how attackers forge the TGT (golden ticket), how they forge service tickets (silver ticket), and how they crack service account passwords offline (Kerberoasting). Read it in sequence and the exam questions start answering themselves.