The Attacking and Defending Active Directory Lab by Altered Security lets you practice real-world AD attacks in a fully patched Windows environment, with multiple domains for cross-trust attack simulations. It covers well-known Windows/AD attacks using tools like PowerShell.
Altered Security (CRTP)