The entry point of an attack is the initial point of contact between the attacker and the target system. In the case of Active Directory, there are several common entry points:
1. Unsecured remote access protocols such as Remote Desktop Protocol (RDP) or Virtual Private Network (VPN)
2. Unpatched software vulnerabilities, such as those found in Internet Information Services (IIS) or the operating system
3. Phishing or social engineering attacks that trick users into revealing their login credentials
4. Weak passwords or unsecured user accounts