Semperis Blog
Insights From Thought Leaders Around The Globe
The digital identities of modern enterprises exist in a dynamic environment. Read thought leadership from experts worldwide regarding the constantly changing global IT environment and insights for keeping up with growing demands, and securing against escalating threats and vulnerabilities.
FEATURED CONTRIBUTOR OF THE MONTH
Your Active Directory was compromised, is it all lost?
Following a 10-year stint in virtualization technologies, I joined Semperis and dove into the world of Active Directory. Over the last three years, which included some of the most vicious malware attacks ever documented, I think I have finally come up to speed on this part of the IAM world. Here are a couple of conclusions I have come to. First, security attacks are not a matter of if, but rather when. If you want to dispute that, check your …
READ MORE >
October 2, 2018 |
Keeping directory sync in sync with security best practices With Azure AD Connect, synchronizing directory data from on-premises Active Directory to Azure AD is both easy and efficient. But is it possible to have too much of a good thing? Security best practices limit sharing to a strict need-to-know basis. However, Azure AD Connect synchronizes 151 attributes by default. You read that right: 151 attributes. So, if you perform the “Express Settings” installation of Azure AD Connect, Azure AD will include a total of 151 attributes (excluding attributes that are …
READ MORE
May 30, 2018
Azure Active Directory Administrative Units
Azure Active Directory Administrative Units: Azure AD Delegation of Administrative Permissions The move to the cloud often means that we need to learn new ways to manage access to cloud based resources. The methods of delegating administrative control we are accustomed to on-premises are often no longer applicable to cloud-based …
READ MORE
May 10, 2018
The Cloud Identity Dilemma
I feel the dilemma ‘Between a rock and a hard place’ applies to many medium-sized businesses when it comes to cloud identity in the face of Microsoft retargeting their identity investment towards the cloud. These organizations may be too big to fully benefit from Identity Management-as-a-Service, but too small to really afford t …
READ MORE
May 7, 2018
Portrait of a 21st Century Active Directory Attacker
It’s been almost 30 years since the movie “Hackers” was released and many of us, when we think of a cyberattacker, still picture a guy wearing a hoody, hanging in his basement while hacking away at a keyboard to gain notoriety. However, a lot has changed in the past three decades and the portrait of an Active Directory attacker …
READ MORE
April 24, 2018
WannaCry, NotPetya, MBR-ONI and Friends: Tales of Wiper Attacks and Active Directory Destruction
Ransomware attacks on enterprises are escalating both in frequency and complexity. Many in the security space believe that WannaCry and NotPetya were only a sample of what’s coming. Increasingly, Active Directory (AD) is at the center of cyberattacks, with wipers like MBR-ONI utilizing AD to maximize the attack reach and, in som …
READ MORE
April 10, 2018
Trees Falling in a Forest: Chronicles of a Data Breach
“If a tree falls in a forest and no one is around to hear it, does it make a sound?” Although the sub-title for this article is a philosophical question, asked by George Berkeley in 1710, it proved to be completely relevant over 300 years later, while I was working with Azure Security Center. A little background… A Microsoft stu …
READ MORE
March 12, 2018
Kerberos at the Company Party
Back in 1999, I wrote a book on Windows 2000 Server in general, and Active Directory in particular. I try not to look back at what I wrote about AD back then compared to what I know now, but I remain fond of a passage that explained how the Kerberos security protocol works – using an analogy of a company party in a hotel ballroo …
READ MOREFeatured WhitePaper
Picking the right type of solution for active directory backup
The infrastructure extension to the cloud has created new challenges for AD administrators to navigate.
DOWNLOAD WHITEPAPER >
Latest Tweets
Subscribe Our Newsletter
