Some knowlege from the top of my head

My personal blog

  1. Using Network Monitor to check for LDAP traffic before demoting Domain Controller.