Windows 12 Won’t Be a Big Bang Release. Here’s Why.
Microsoft is apparently scrapping next year’s big update for Windows… Continue reading Windows 12 Won’t Be a Big Bang Release. Here’s Why.
Category Archives: active directory
SAMR Forensic Investigation
I am currently investigating on suspicious SAMR request on a specific domain.
From my knowledge, SAMR (i.e. SAM Request) is the act to ask directly a Domain Controller in order to take information, for example, about users.
This kind of re… Continue reading SAMR Forensic Investigation
How to Install Active Directory PowerShell Module
In this guide, we’ll show you how to install the… Continue reading How to Install Active Directory PowerShell Module
CISA Advises Federal Agencies to Patch Windows LSA Flaw Affecting Domain Controllers
Back in May, the Cybersecurity & Infrastructure Security Agency (CISA)… Continue reading CISA Advises Federal Agencies to Patch Windows LSA Flaw Affecting Domain Controllers
Microsoft Entra Verified ID Now Lets Users Recover Lost Credentials
Microsoft has announced new features and improvements coming to its… Continue reading Microsoft Entra Verified ID Now Lets Users Recover Lost Credentials
Microsoft Entra Verified ID Now Lets Users Recover Lost Credentials
Microsoft has announced new features and improvements coming to its… Continue reading Microsoft Entra Verified ID Now Lets Users Recover Lost Credentials
Why did Microsoft publish the CPassword AES key ca. 2012?
As outlined in Security Bulletin MS14-025, Microsoft acknowledges the way credentials had been stored in the group policy field "CPassword" is insecure and is not to be trusted any more.
However according to their own Developer D… Continue reading Why did Microsoft publish the CPassword AES key ca. 2012?
Should a standard user in a AD domain be able to open cmd prompt as Administrator?
I was given a standard non-admin user and a workstation to perform internal pentest assessment. To my surprise, I was able to open cmd prompt as administrator, use psexec and gain a SYSTEM shell giving me local admin access. Is it normal t… Continue reading Should a standard user in a AD domain be able to open cmd prompt as Administrator?
How to notify administrators of an Active Directory pwd change?
I don’t know much about AD or Windows security. As in this question, I understand that pwd change notification can be useful for both users and for system administrators.
As an AD administrator on Windows Server 2012 R2, can I configure th… Continue reading How to notify administrators of an Active Directory pwd change?
Review: Enzoic for Active Directory
Data breaches now happen so often that we don’t even pause when reading yet another headline notifying us of the latest one. We react only if the breach happened to a service we use – and maybe not even then. But we should all be aware that once one of… Continue reading Review: Enzoic for Active Directory