Collaborate Disseminate
My boss has requested me to perform a GPO (Group Policy Object) review for Microsoft AD which is currently running in my organization. But I have no clue what this means. Does anyone have an idea what this is? Please let me know how to sta… Continue reading How to perform a Microsoft AD GPO Review? [closed]
The attacks on Microsoft Exchange servers around the world by Chinese state-sponsored threat group Hafnium are believed to have affected over 21,000 organizations. The impact of these attacks is growing as the four zero-day vulnerabilities are getting … Continue reading Timeline of a Hafnium Attack
We’ve been using the SpecOps Password Audit tool in our company for a while now and I’d like to give a junior member of our security team access. Unfortunately, the tool needs Domain Admin access to do a complete scan, as anything below th… Continue reading Permissions for reading password hashes in AD
I have been experimenting NTLM and its different relay mitigations, including MIC and channel bindings.
In my understanding:
NTLM auth starts with a negotiation packet sent by the client. In this negotiation packet, the client describes w… Continue reading Downgrade of NTLM Authentication
While perimeter defenses like firewalls and antivirus software remain essential elements of comprehensive network defense, stopping 100% of attacks at the perimeter is an impossibility with today’s ever-evolving attack surface. Eventually, an attacker… Continue reading 3 Keys to Defending Active Directory
I am taking over an AD role and one of the tasks I want to accomplish is to "clean up" active directory… remove stale accounts, empty groups, ensure groups have the right users in them.
The domain has a few thousand users.
What… Continue reading Active Directory / Domain spring cleaning best practices [migrated]
How do I add a user to the Domain Admins group when it says I do not have permission.
I have Active Directory installed on a Windows Server 2019 virtual machine hosted in Azure. The VM is domain joined.
I installed Active Directory using a… Continue reading How to add to Domain Admins group? [migrated]
Mosyle announced a new approach to Apple device management and protection with the introduction of Mosyle Fuse. The product is the cloud-native solution to blend enterprise-grade mobile device management (MDM), identity management, automated applicatio… Continue reading Mosyle boosts Apple device management and security with Mosyle Fuse
If you think you’re having a bad day at work, pity the poor sysadmin at Victoria University of Wellington in Australia, who accidentally nuked the desktops of pretty much everyone …read more Continue reading Hackaday Links: March 21, 2021
I have been researching kerberos and ntlm for the last couple of days and still got one thing unresolved.
After an interactive logon with kerberos, you will have in the cached credentials both kerberos tickets and ntlm hashes. I figured wi… Continue reading How NTLM SSO is preformed on smartcard Kerberos logon?