A practical, ethics first digital guide and workbook to design a compact Active Directory lab, plan and run a safe lateral movement chain, capture the path in an attack graph, and translate findings into detection coverage and mitigations. It includes lab build checklists, detection engineering templates, and reporting aids so teams can improve defenses and communicate results to stakeholders.