It was mainly focused around active directory and kerberos attacks, it also had a few questions about ticketing and print spooler service in active directory, there was a hint of acceptance that the interviewer had for my answers.