Active Directory Security
Categories
- Active Directory Backup & Recovery (71)
- Active Directory Security (252)
- AD Security 101 (19)
- Agentic AI (16)
- Community Tools (26)
- Crisis Management (9)
- Cyber Resilience (1)
- Directory Modernization (11)
- From the Front Lines (71)
- Hybrid Identity Protection (102)
- Identity Attack Catalog (32)
- Identity Security Research Library (11)
- Identity Threat Detection & Response (180)
- Our Mission: Be a Force for Good (15)
- Purple Knight (6)
- Semperis University (5)
- The CISO's Perspective (19)
- Threat Research (93)
- Uncategorized (3)
AD Group Risks: How Cryptographic Operators Dangers Escalate Quickly
- Tim Beasley
- Oct 14, 2026
At first glance, the Cryptographic Operators group doesn’t look scary. But it sits dangerously close to the systems that define trust—and in Windows, trust is everything. Here’s how to head off risk in your environment.
Battling Zombie Certificates: The Persistent Risk Lurking in AD CS
- Jake Hildreth
- Oct 07, 2026
Darkness falls across the land…and Zombie Certificates—authentication certificates that can’t be killed—are close at hand! Learn how to detect and kill these AD CS persistence risks…and prevent another outbreak…
Change How You Protect Active Directory Service Accounts
- Eran Gewurtz | Director of Product Management
- Sep 29, 2026
Good security tools should automate decisions as much as possible—without taking away your judgment. Semperis introduces Service Accounts Protection – Advanced to automate AD service account protection, make account discovery and evaluation continuous, and reduce administrators’ operational load.
Introducing Migrator for AD: Move Active Directory with Confidence
- Jason Jocobo
- Sep 09, 2026
Migrator for Active Directory 2.0 rebuilds directory synchronization around operator control: scoped sets, a staging report before every commit, and live status while it runs. Why? Because control is where speed comes from.
What Should You Install on Your Domain Controllers?
- Tim Beasley
- Sep 01, 2026
Which software should be installed on a domain controller? Which roles should be deployed? Which applications are required? To answer these questions, you must consider what a DC is actually meant to do: control a domain. Learn which roles and software belong on domain controllers—and how your choices can affect…
How to Redefine Cyber Resilience: Start by Rethinking Hybrid Identity Protection
- Guido Grillenmeier | Principal Technologist, EMEA
- Aug 19, 2026
Cyber resilience isn't a single team’s job anymore. Learn about the roles a resilient organization actually needs assembled, long before the next crisis forces the point—and make your case for involving your whole team in the Hybrid Identity Protection Community.
How the Five Eyes AI Warning Changes Board Thinking About Cyber Recovery and Resilience
- Nick Lowther
- Aug 04, 2026
AI has changed the face of the attack surface. It has changed how attackers advance and how we defend systems. And it changes the way that Boards must think about the intersection of AI adoption, identity security, and recovery.
AD Group Risks: Hidden Dangers in Backup Operators
- Tim Beasley
- Jul 28, 2026
Defenders tend to shrug off the idea that the Backup Operators AD security group harbors hidden risks. That’s a mistake. Under the hood, it has rights that can enable serious—and in the wrong hands, catastrophic—abuse.
