SyncJacking: On-Prem AD to Cloud Admin

Entra Connect hard-match hijacking, MSOL credential extraction, PTA agent backdoor, sync API abuse, and attack path mapping with AzureHound