Active Directory Hardening Series by Jerry Devore:
- Part 1 – Disabling NTLMv1: https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/active-directory-hardening-series-part-1-disabling-ntlmv1/ba-p/3934787

- Part 2 – Removing SMBv1: https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/active-directory-hardening-series-part-2-removing-smbv1/ba-p/3988317

- Part 3 – Enforcing LDAP Signing: https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/active-directory-hardening-series-part-3-enforcing-ldap-signing/ba-p/4066233

- Part 4 – Enforcing AES for Kerberos: https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/active-directory-hardening-series-part-4-enforcing-aes-for/ba-p/4114965

#ActiveDirectorySecurity #adhardening

Preventing DCSync Attacks is complicated! If you dig into the root vulnerability, you realize most posts miss some attack paths.
So, I wrote a blog post on digging into the details of the attack.

https://buff.ly/3xlPtZr

#AdHardening #CyberSecurity

Preventing DCSync Attacks is complicated! If you dig into the root vulnerability, you realize most posts miss some attack paths.
So, I wrote a blog post on digging into the details of the attack.

https://buff.ly/3xlPtZr

#AdHardening #CyberSecurity