Building Your First Hybrid Lab
Extend your local SQL Server lab to Azure with a step-by-step guide on implementing a hybrid cloud Availability Group, network connectivity, and highly available Active Directory.
Navigating Row Level Security
Explore fine-tuned data access with Row Level Security in SQL Server, covering implementation patterns, scaling solutions, and practical tips for sensitive information management.
Who's Who - Federating Identity with Azure B2C
Explore Azure B2C for federated identity management, allowing seamless integration of external credentials while maintaining local authorization control.
Abusing Mixed Vendor Kerberos Stacks - Exploiting Windows AD and Linux Authentication
Discover security vulnerabilities in mixed Kerberos environments and learn how to exploit weaknesses between Windows Active Directory and Linux/Unix systems for privilege escalation.
Simulating Attacks Against Hydroelectric Power Plants Using ICS Firing Range
Dive into a comprehensive simulation of cyberattacks on hydroelectric facilities, exploring both offensive tactics and defensive strategies through a custom-built ICS firing range environment.
Atomic Red Team: Closing the Gap with Threat Actors
Explore Atomic Red Team for effective threat simulation, bridging the gap with real-world attackers. Learn practical techniques to enhance incident response and cybersecurity preparedness.
Understanding Azure AD Hybrid Join
Explore Azure AD Hybrid Join, comparing AD Join, Azure AD Join, and Hybrid options. Learn access methods, implementation considerations, and best practices for device management.
Azure Directory Services - AZ-900 Certification Course
Explore Azure directory services, including Microsoft Entra ID and Domain Services. Learn key concepts for identity management and authentication in cloud environments.
CertifiedDCOM - The Privilege Escalation Journey to Domain Admin with DCOM
Uncover a critical DCOM vulnerability allowing remote privilege escalation to Domain Admin in Windows networks. Learn about DCOM internals and exploit techniques for Active Directory takeover.
An ACE Up the Sleeve - Designing Active Directory DACL Backdoors
Explore Active Directory DACL backdoors, their offensive potential, and stealth techniques. Learn about control relationships, elevation paths, and persistence methods in AD objects.
Using Bloodhound as a Defender: Tips from the Red Team
Discover how to leverage BloodHound from a red team perspective to identify and remediate critical Active Directory security flaws, with practical insights using the new ad-recon automation tool.
How to Be an Ethical Hacker in 2025 - A Comprehensive Guide to Cybersecurity Skills
Master the path to ethical hacking with comprehensive guidance on foundational IT skills, networking, Linux, programming, and advanced security concepts, including web applications and wireless hacking techniques.
Analyzing and Executing ADCS Attack Paths with BloodHound
Discover how to identify, analyze, and execute ADCS attack paths using BloodHound, while learning practical remediation strategies for defending against PKI-based privilege escalation in Active Directory environments.
NTLM Relay Attacks - An OPSEC-Conscious Approach to Port 445 Takeover
Discover a stealthy technique for NTLM relay attacks by hijacking port 445/tcp, featuring reverse engineering insights and automation tools for enhanced SMB-based operations with minimal detection risk.
Active Directory and DNS: A Match Made in Heck - Understanding Directory Services Integration
Dive into the intricate relationship between Active Directory and DNS, exploring security implications, management strategies, and best practices for maintaining a robust directory service infrastructure.
Protect Your Most Sensitive Users with Protected Users Group in Windows Server
Discover how Windows Server's Protected Users Group safeguards sensitive accounts, learn its attack-thwarting capabilities, and implement practical strategies for enhanced security in Active Directory environments.
The Current State of Microsoft Identity Security - Common Security Issues
Explore modern identity security challenges in Microsoft environments, focusing on Active Directory and Azure AD vulnerabilities, recent breaches, and essential defensive strategies.
Network Segmentation Using Windows Host-Based Firewall and Group Policy
Master Windows network segmentation using Group Policy to deploy host-based firewall rules, control communication between security zones, and manage endpoints through Active Directory security groups.
Spooky Authentication at a Distance - Post-exploitation Techniques for Windows Environments
Discover innovative post-exploitation techniques for proxying Windows authentication protocols remotely, enabling user impersonation and domain control without elevated privileges.
MaLDAPtive: LDAP Query Obfuscation and De-Obfuscation Techniques
Dive into advanced LDAP query obfuscation techniques and defense strategies, exploring a comprehensive framework for detecting and preventing directory services attacks through custom tokenization and parsing.
Unify Role-Based Access Control Mechanisms for AD, Linux, and Apache OpenMeetings
Unify role-based access control for AD, Linux, and Apache OpenMeetings. Explore RBAC mechanisms, LDAP integration, and system configurations. Gain insights into enterprise authentication and open-source video conferencing.