Collaborate Disseminate
I am looking for the right practice to provide access to application owners. As of now they are part of system admins groups. whoever part of the group login tho the servers any time and do any stuff.
should PAM solution with shared ID w… Continue reading server access to application owners
I am setting up a Privileged Access Workstation (PAW) to access a whitelist of websites. Currently I have been following this guide on Github by unassassinable and applying the latest Windows 10 security baselines.
Is there any documenta… Continue reading Setup guide for Privileged Access Workstation on Windows 10
As an administrator of certain systems in a company I understand and adhere to the “principle of least privilege” — which I’m assuming I don’t need to repeat its definition here, so let’s just say people here get given access to systems o… Continue reading Applying "principle of least privilege" when it comes to execs and owners of the company – should they automatically get all permissions if requested?
I am a junior web developer. All I know is mostly about web development. I have no skills and knowledge about system security and know little about Linux.
I work in a company which is developing some embedded product. In the… Continue reading Risk of Docker backdoor allowing impersonation
We are currently trying to enhance the security posture of our company, and this means changing how some IT personnel work.
Put precisely, our IT helpdesk currently have 2 separate accounts: 1 for normal day-to-day usage (m… Continue reading Best practices or advice to convince IT admins not to map network drives in privileged sessions with users
I support a number of applications some of which have sql databases. There’s a number of scripts (mostly powershell/bash) to check the state of an application to see if it’s considered healthy. Some of these scripts make call… Continue reading Insider threat mitigation sql databases
We’re a medium-sized enterprise with many different IT administrators (e.g. domain admins, Azure admins, DB admins, …). We’re worried that hackers can easily breach an admin’s laptop and through that steal data / do serious… Continue reading What’s the best practical way to protect our IT administrators?
I’ve compromised a Windows machine that leaks the password of a privileged service account (“Domain Admin”) in memory (legal penetration test).
Since the account is a service account, it cannot be used to log into the machin… Continue reading How to run command as privileged Windows service account against Active Directory domain controller?
There are a number of users in the business who are required to perform administrative tasks on machines, not least the IT Service Desk, also Devs etc.
The only requirement for administrative access within our estate would b… Continue reading Principle of Least privilege; is it ever a ‘good idea’ to give standard users administrative privileges?
It?s time to think beyond the password to be sure users can connect conveniently to the resources they need while you increase security. Learn how implementing multi-factor authentication across all points of connection?VPN, SaaS apps and more?assures … Continue reading Beyond the Password: Implementing MFA at Every Connection Point