Active Directory Security
Categories
- Active Directory Backup & Recovery (64)
- Active Directory Security (221)
- AD Security 101 (17)
- Community Tools (19)
- Directory Modernization (9)
- From the Front Lines (69)
- Hybrid Identity Protection (68)
- Identity Attack Catalog (31)
- Identity Threat Detection & Response (146)
- Our Mission: Be a Force for Good (14)
- Purple Knight (5)
- Semperis University (4)
- The CISO's Perspective (16)
- Threat Research (68)
Exploiting the Intruder’s Dilemma for Active Directory Defense
- Huy Kha | Senior Identity & Security Architect
- May 20, 2025
Can you create an AD defense that exploits intruder attack techniques? Learn how to selectively use an attacker’s own methods to detect and expel them.
Top 10 Active Directory Risks IFIR Has Caught in the Wild
- Huy Kha | Senior Identity & Security Architect
- May 15, 2025
Identity Forensics and Incident Response prioritizes business resilience, starting with understanding threats and reducing the attack surface. Tackle these 10 common AD risks now to strengthen your identity security.
Group Policy Preferences Abuse Explained
- Huy Kha | Senior Identity & Security Architect
- May 13, 2025
The Group Policy Preferences feature provides a well-known pathway for cyber attackers to discover easily decoded passwords in Active Directory. Learn to spot and defend against this vulnerability.
Defending Against Cable: Prevent Malicious Use of Post-Exploitation Tool
- Huy Kha | Senior Identity & Security Architect
- May 06, 2025
Post-exploitation tools—such as Cable, the Active Directory-specific pentesting tool—are meant to educate security teams. But attackers use them too. Here’s how to detect and defend against malicious use of the Cable tool.
ESC1 Attack Explained
- Huy Kha | Senior Identity & Security Architect
- May 01, 2025
Discover how certificate template misconfigurations in Active Directory Certificate Services (AD CS) enable ESC1 attacks—allowing cyber attackers to rapidly escalate privileges and potentially compromise entire networks.
AD Security: How to Use Delegation of User Management and Windows Password Options
- Guido Grillenmeier | Principal Technologist, EMEA
- Apr 29, 2025
Permission delegation in Active Directory can be complex. Learn how you can use Windows password options with delegation management to support your user management structure without sacrificing AD security.
How to Automatically Undo Risky Changes in Active Directory
- Huy Kha | Senior Identity & Security Architect
- Apr 21, 2025
For most organizations, manually auditing and rolling back every risky Active Directory change isn’t practical—or even possible. Discover how the Auto Undo feature in DSP works to automate change mitigation to protect sensitive AD and Entra ID objects and attributes.
Pass the Hash Attack Explained
- Huy Kha | Senior Identity & Security Architect
- Apr 09, 2025
Cyber attackers can choose from numerous credential compromise methods to gain access to Active Directory. The Pass the Hash attack is one that is stealthy and efficient.
