IT service desks lacking user verification policy, putting businesses at risk

48% of organizations don’t have a user verification policy in place for incoming calls to IT service desks, according to Specops Software. The information was uncovered as part of a survey of more than 200 IT leaders from the private and public sectors… Continue reading IT service desks lacking user verification policy, putting businesses at risk

Construindo uma lista completa de verificação de segurança de rede

Entender o que auditar em uma rede pode ser caótico e confuso. Construir uma lista de verificação de segurança de rede completa é crucial para organizações com computadores conectados à Internet ou entre si. Pense nisso como uma varredura antivírus …
T… Continue reading Construindo uma lista completa de verificação de segurança de rede

How to Defend Against Ransomware-as-a-Service Groups That Attack Active Directory

Concern about the Colonial Pipeline ransomware attack by DarkSide has expanded beyond the cybersecurity industry and into the consciousness of the everyday consumer—an indicator of the extensive implications the attack has on the global economy. In res… Continue reading How to Defend Against Ransomware-as-a-Service Groups That Attack Active Directory

What does a missing "Account" field mean in Windows event 4769 (A Kerberos service ticket was requested)? [migrated]

I’m working on some detections for Kerberoasting using event 4769 (A Kerberos service ticket was requested) by trying to find users requesting multiple TGS tickets for several services in a short span of time. The user can be found in the … Continue reading What does a missing "Account" field mean in Windows event 4769 (A Kerberos service ticket was requested)? [migrated]

Having Active Directory password length of more than 8 characters when that password is used to access mainframe systems

I am an intern with a Credit Union. I was surprised to find out that my Active Directory password length cannot be more than 8 characters. They use RACF for access to TSO or OMVS. I asked my mentor and he told me AD passwords are used to a… Continue reading Having Active Directory password length of more than 8 characters when that password is used to access mainframe systems