Recent Blog ArticlesNewest TopicsMost LikesTagged:TagActive Directory Hardening Series - Part 8 – Disabling NTLM Hi All. Jerry Devore back again to continue talking about hardening Active Directory. This time I want to discuss disabling NTLM or more likely how to minimize its use in a domain until all depende...Active Directory Hardening Series - Part 7 – Implementing Least Privilege Hi all! Jerry here again to continue the AD hardening series. This time I want to address the concept of least privilege as it applies to Active Directory. Of the three principles of Zero Trust (v...Active Directory Hardening Series - Part 6 – Enforcing SMB Signing Hi everyone! Jerry Devore here to continue the Active Directory Hardening series by addressing SMB signing. Many of my Microsoft colleagues have already written some great content on SMB signing so...Active Directory Hardening Series - Part 5 – Enforcing LDAP Channel Binding Channel Binding is a LDAP hardening setting that is often misunderstood and as a result is often not enabled. In this post I explain why it is important along with how to leverage some event logging...Active Directory Hardening Series - Part 4 – Enforcing AES for Kerberos Disabling Kerberos RC4 is a top priority for many organizations today but identifying devices that don't support AES has been very challenging. In this post I explain that a very helpful clue has be...Active Directory Hardening Series - Part 3 – Enforcing LDAP Signing In this series my goal is to help you understand how to move forward with confidence by better understanding the changes along with how to perform proper due diligence. Active Directory Hardening Series - Part 2 – Removing SMBv1 In this series my goal is to help you understand how to move forward with confidence by better understanding the changes along with how to perform proper due diligence. Active Directory Hardening Series - Part 1 – Disabling NTLMv1 In this series my goal is to help you understand how to move forward with confidence by better understanding the changes along with how to perform proper due diligence. Decrypting the Selection of Supported Kerberos Encryption Types In response to the current threat landscape, security departments are beginning to require AES for Kerberos ticket encryption. In this blog we will break down the compatibility consideratio...
MicrosoftMicrosoftMicrosoftMicrosoft
