Identity Threat Detection & Response
Categories
- Active Directory Backup & Recovery (71)
- Active Directory Security (251)
- AD Security 101 (19)
- Agentic AI (16)
- Community Tools (26)
- Crisis Management (9)
- Cyber Resilience (1)
- Directory Modernization (11)
- From the Front Lines (71)
- Hybrid Identity Protection (102)
- Identity Attack Catalog (32)
- Identity Security Research Library (11)
- Identity Threat Detection & Response (179)
- Our Mission: Be a Force for Good (15)
- Purple Knight (6)
- Semperis University (5)
- The CISO's Perspective (19)
- Threat Research (93)
- Uncategorized (3)
Battling Zombie Certificates: The Persistent Risk Lurking in AD CS
- Jake Hildreth
- Oct 07, 2026
Darkness falls across the land…and Zombie Certificates—authentication certificates that can’t be killed—are close at hand! Learn how to detect and kill these AD CS persistence risks…and prevent another outbreak…
What Should You Install on Your Domain Controllers?
- Tim Beasley
- Sep 01, 2026
Which software should be installed on a domain controller? Which roles should be deployed? Which applications are required? To answer these questions, you must consider what a DC is actually meant to do: control a domain. Learn which roles and software belong on domain controllers—and how your choices can affect…
How to Redefine Cyber Resilience: Start by Rethinking Hybrid Identity Protection
- Guido Grillenmeier | Principal Technologist, EMEA
- Aug 19, 2026
Cyber resilience isn't a single team’s job anymore. Learn about the roles a resilient organization actually needs assembled, long before the next crisis forces the point—and make your case for involving your whole team in the Hybrid Identity Protection Community.
Checklist: Prepare Your Identity Fabric for the Agentic Era
- Alex Weinert | Chief Product Officer
- Jul 30, 2026
Your business leaders are racing to adopt generative and agentic AI to move faster and unlock new efficiencies. As your business bets more on agents, it bets more on your identity fabric. Use this checklist to be sure you’re ready.
AD Group Risks: Hidden Dangers in Backup Operators
- Tim Beasley
- Jul 28, 2026
Defenders tend to shrug off the idea that the Backup Operators AD security group harbors hidden risks. That’s a mistake. Under the hood, it has rights that can enable serious—and in the wrong hands, catastrophic—abuse.
The Minimum Viable Company Part 3: Enabling Visibility, Control, and Operational Resilience
- Kriss Stephen | Principal Solutions Architect
- Jul 21, 2026
True cyber resilience doesn’t begin with recovery. It starts much earlier, through stronger visibility, tighter control, and—crucially—identity resilience that enables the organization to correct issues before they became business-disrupting events.
Bringing Identity Context Into the Microsoft Security Workflow: Semperis’ Integration with Sentinel and Copilot
- Ran Harel
- Jun 23, 2026
We now have a working, field-ready integration that brings Semperis Lightning Intelligence into the Microsoft security ecosystem. This is not just another screen for defenders to look at. It’s a way to make identity risk actionable inside the workflows security teams already use every day.
When the Lights Go Out: What the Foxconn Breach Tells Us About Identity-First Ransomware
- Benjamin Lim
- Jun 19, 2026
Understanding how an identity-first exploit enabled ransomware attackers to disable Foxconn can open your eyes to possible gaps in your own identity security. Discover how attackers take advantage of complexity in manufacturing organizations—and steps you can take to defend your organization’s business operations.
