AD Security 101
Categories
- A Force for Good (20)
- Active Directory Backup & Recovery (108)
- Active Directory Security (230)
- AD Security 101 (8)
- Community Tools (22)
- Directory Modernization (13)
- From the Front Lines (69)
- Hybrid Identity Protection (66)
- Identity Threat Detection & Response (128)
- The CISO's Perspective (13)
- Threat Research (45)
AD Security 101: GPO Logon Script Security
- Daniel Petri
- Jun 07, 2023
In Active Directory (AD) environments, Group Policy Objects (GPOs) can be used to configure logon scripts. These scripts can be powerful tools to manage and automate the logon process for users and computers in the AD environment. You can assign and place such scripts in any GPO within the organization.…
AD Security 101: Non-Default Security Principals with DCSync Rights
- Daniel Petri
- May 25, 2023
Misuse of DCSync functionality can lead to vulnerabilities that put Active Directory—and your enterprise network—at risk.
AD Security 101: Domain Controller Security
- Daniel Petri
- May 05, 2023
For organizations that use Active Directory (AD), securing domain controllers (DCs) is an essential part of AD security. DCs are critical components of the IT infrastructure. These servers hold sensitive and security-related data, including user account information, authentication credentials, and Group Policy objects (GPOs). Naturally, then, DC security is an…
AD Security 101: SIEM Tools and AD Monitoring
- Daniel Petri
- Mar 23, 2023
Before we dive into technical tips that I mentioned in my previous post, I want to raise an important point. If you're relying solely on security information and event management (SIEM) tools for Active Directory (AD) security monitoring—especially against potential cybersecurity attacks—you might not be getting a complete picture of…
AD Security 101: AD Monitoring for Malicious Changes
- Daniel Petri
- Mar 09, 2023
Welcome to AD Security 101. This blog series covers essential aspects of Active Directory (AD) security, offering basic concepts, best practices, and expert advice. I’ll start with a short discussion of why AD security is so important. Then I’ll dive into the series with one of the first steps you…
5 Essential ITDR Steps CISOs Must Know
- Semperis Team
- Jan 26, 2023
Just as the impact of cyberattacks is not confined to the IT department, the role of the CISO has expanded beyond the security team. With organizations and analysts now acknowledging that identity is the new security perimeter, overseeing a comprehensive identity-first security strategy has become an essential CISO responsibility. What…
