Publications
CyberAct cybersecurity publications
SOC, Red Team, compliance, training: our practical insights and advice, published regularly.
#domain controller security#Active Directory attack#Kerberoasting#DCSync#Golden Ticket#domain controller#Active Directory#LLMNR#SMB signing#Pass-the-Hash#Pass-the-Ticket#compromised Active Directory#Credential Guard#Mimikatz Rubeus lateral movement#Exchange Hybrid#Entra ID#Lateral Movement#Cloud Identity#Trojans#Malware#SOC#Threat Intelligence#C2#Security Audit#Privileged Accounts#Kerberos#AD Governance#IDOR#Microservices#Blue Team#API Security#CI/CD#IPv6#NTLM#Red Team#Network Protocols#NTLM Relay#AD Hardening#SMB#LDAP#GPO#Pentest#Network Segmentation#Remediation#Fortinet#Vulnerability Management#Vendor Risk#Firewall#Credential Management#Network Vulnerability#GPU Cracking#Patch Management#Privilege Escalation#BloodHound#Azure AD#IAM Audit#AWS IAM#Cloud Security#AWS Pentest#OAuth#Microsoft 365#Identity#ADFS#SAML#Hybrid Identity#Tier 0#Zero Trust#Conditional Access#Identity Attack#DPAPI#Hybrid SOC#Exchange Online#Incident Response#Exfiltration#Audit Log
MenacesActive Directory Misconfigurations: When Your Domain Controller Opens the Door
A misconfigured domain controller can compromise your entire network. LLMNR, SMB signing, legacy protocols — here's what attackers actually exploit.
Jun 21, 20265 min read
Red TeamDomain Controller Security: What Attackers Know That You Don't
Your domain controller is the highest-value target in any Windows environment. Here's how attackers go after it, and how to stop them.
Jun 21, 20264 min read