Purple Knight
Categories
- Active Directory Backup & Recovery (56)
- Active Directory Security (158)
- AD Security 101 (10)
- Community Tools (16)
- Directory Modernization (8)
- From the Front Lines (65)
- Hybrid Identity Protection (52)
- Identity Threat Detection & Response (112)
- Our Mission: Be a Force for Good (14)
- Purple Knight (4)
- The CISO's Perspective (12)
- Threat Research (45)
- Uncategorized (1)
Semperis Offers New Protection Against Okta Breaches
- Semperis Research Team
- Aug 30, 2023
In an ever-evolving digital landscape, organizations rely on robust identity protection solutions to safeguard sensitive data and maintain secure operations. For most enterprise businesses, that means protecting Active Directory and Entra ID (formerly Azure AD). But identity protection is just as vital for organizations that use Okta, a cloud-based identity…
AD Security 101: Man-in-the-Middle Attacks
- Daniel Petri
- Jul 13, 2023
Man-in-the-middle attacks, also known as MitM attacks, are a form of eavesdropping. These attacks can pose a serious threat to organizations' network security, particularly in environments that use Microsoft Active Directory (AD) for identity management. What is a man-in-the-middle attack? In a man-in-the-middle attack, a malicious actor positions themselves between…
AD Security 101: Resource-Based Constraint Delegation
- Daniel Petri
- Jun 23, 2023
Resource-based constraint delegation (RBCD) is an Active Directory (AD) security feature that enables administrators to delegate permissions in order to manage resources more securely and with greater control. Introduced in Windows Server 2012 R2 as an enhancement to the traditional Kerberos constrained delegation (KCD), RBCD can help to reduce the…
AD Security 101: Lock Down Risky User Rights
- Daniel Petri
- Jun 16, 2023
In Active Directory (AD) environments, you can use Group Policy Objects (GPOs) to configure user rights. By using GPOs, you can easily enforce consistent user rights policies across all computers in the domain or organizational unit (OU). This capability makes it easier to manage and maintain user access control over…
