Hacking AD

When attacking AD the goal is to take control over the DC. For that reason, we are targeting Domain Admins => https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/understand-security-groups#domain-admins

In forests, Enterprise Admins group are granted full control over all the domains in the forest and have Administrator privilege on all DCs.