Password spraying on Active Directory: a quick benchmark

A few months ago, I was working on an Active Directory security assessment engagement for a fairly big company. The associated Active Directory domain was quite large (over 130000 users) and at one...