There is a good repository for explaining what is a Killchain for an AD : https://github.com/infosecn1nja/AD-Attack-Defense/blob/master/README.md