[rwth-security] Defending the Kingdom: Hardening Domain Controllers Against Modern Ransomware Campaigns (2025)