Certipy, AD CS, and the Day Suricata Told Me “dce” Isn’t a Protocol
Yeah so AD CS abuse is one of those things that looks clean in a conference talk and messy the second you try to detect it on a …
Continue reading →Category: Identity & Hardening
ADFS, GPO, SSH, and identity logging baselines.
Investigating Active Directory Account Lockouts Like an Analyst
Yeah so account lockouts. Most of them are boring. Phone still has the old password, Outlook on a laptop that never got the new one, some backup job …
Continue reading →