An ACE Up The Sleeve - Designing Security Descriptor Based Backdoors
Explore advanced Active Directory security techniques, focusing on designing backdoors using security descriptors. Learn about access control, security reference monitors, and stealth primitives.
Offensive Active Directory with PowerShell
Learn offensive techniques for Active Directory using PowerShell, covering user hunting, enumeration, GPO abuse, trust exploitation, and more. Gain practical skills for penetration testing and security assessments.
Bypassing Microsoft Defender for Identity
Explore techniques to bypass Microsoft Defender for Identity, executing high-impact attacks across the kill chain while avoiding detection in on-premises Active Directory environments.
Forging Trusts for Deception in Active Directory
Explore forging trusts in Active Directory for deception-based defense. Learn techniques to implant decoy objects, trap adversaries, and enhance network security through live demonstrations.
Evading Microsoft ATA for Active Directory Domination
Explore techniques for evading Microsoft ATA in Active Directory environments, including threat detection bypasses, attack chain modifications, and strategies for maintaining domain dominance.
Breach Assessments - Are You Owned? You Can Find Out!
Discover techniques to detect ongoing network breaches, analyze anomalous behavior, and eradicate threats from Red Team experts turned Blue Team specialists.
The Role of Delegation and Automation in IAM
Learn effective IAM strategies through delegation and automation in Active Directory and Azure AD, focusing on least privilege models, identity management checklists, and routine task automation.
Avoiding an Identity Crisis - Authentication with Windows Server Containers
Explore authentication methods for .NET applications in Windows Server containers, covering Active Directory integration, gMSAs, and modern protocols like OAuth for secure identity management.
Implementing the Lessons Learned From a Major Cyber Attack
Explore lessons from Maersk's 2017 NotPetya cyber-attack, focusing on recovery strategies, resilient infrastructure, and evolving security principles for modern threats.
Evading Microsoft ATA for Active Directory Domination
Explore techniques to bypass Microsoft ATA's threat detection in Active Directory, covering reconnaissance, credential attacks, lateral movement, and persistence methods.
Breaking the Attack Graph - How to Leverage Graphs to Strengthen Security in a Domain Environment
Explore how defenders can leverage graph-based thinking to strengthen security in domain environments, adapting to sophisticated attackers and enhancing prevention, detection, and investigation strategies.
The Active Directory Botnet
Explore how botnets and C&C servers can infiltrate organizations, bypass network controls, and render security measures ineffective, with a focus on Active Directory vulnerabilities.
Top Active Directory Attacks - Understand, then Prevent and Detect
Explore common Active Directory attacks, prevention strategies, and detection methods. Learn to secure enterprise networks against prevalent hacking techniques and enhance cybersecurity practices.
The Great Sandbox Escape
Explore novel ransomware techniques, including virtual machine deployment for attacks. Learn about attacker strategies, detection methods, and cybersecurity insights from a malware specialist.
PowerShell Exploitation - PowerSploit - Bloodhound - PowerShellMafia - Obfuscation
Explore PowerShell exploitation techniques, including obfuscation and malware tactics. Learn to analyze logs, detect suspicious activities, and implement effective security measures.
Kerberoasting Revisited
Explore advanced Kerberoasting techniques, encryption types, and defenses. Learn about the "tgtdeleg" trick and Rubeus for improved Kerberoasting in this cybersecurity deep dive.
Attacking Azure Environments with PowerShell
Learn to exploit Azure environments using PowerShell, covering data dumping, modules, and various services. Gain insights into escalation techniques and practical demonstrations.
Future Forests - Realistic Strategies for AD Security & Red Forest Architecture
Strategies for implementing Microsoft's Red Forest architecture to mitigate Active Directory attacks, covering benefits, challenges, and practical steps for enhanced security in enterprise domains.
CrackMapExec Owning Active Directory by Using Active Directory
Explore Active Directory exploitation using CrackMapExec. Learn libraries, authentication, payload modules, and execution techniques for effective penetration testing and security assessment.
Active Directory Real Defense for Domain Admins
Learn practical strategies to secure Active Directory, including limiting Domain Admin accounts, setting logon restrictions, and implementing best practices for enhanced network protection.
Active Directory - Real Defense for Domain Admins
Practical strategies for securing Domain Admins and Domain Controllers in Active Directory environments, including account management, password policies, and logon restrictions.