+ SECURE \ Active Directory \ Hardening

Golden Certificates are an advanced persistence technique linked to Active Directory Certificate Services (AD CS) compromises. When attackers gain administrative

Active Directory Certificate Services (AD CS) is Microsoft’s Public Key Infrastructure (PKI) framework, managing encryption, code signing, and authentication through

In Microsoft Active Directory environments, Group Policy Preferences (GPP) was once a go-to method for setting local administrator passwords and

Active Directory environments become ripe targets when computer objects are misconfigured with unconstrained delegation. This configuration allows attackers to impersonate

MachineAccountQuota abuse leverages a default Active Directory setting that allows user accounts to create up to ten computer objects within

Password spraying is a stealthy technique where attackers try a small number of common passwords across many Active Directory user

AS-REP Roasting is an attack method targeting Active Directory user objects that don’t require Kerberos pre-authentication. Unlike Kerberoasting, where service

Kerberoasting is a technique where attackers request service tickets from Active Directory for accounts tied to a Service Principal Name