I spent years hearing “Active Directory” in cybersecurity content. I never really understood it. Until today.

Windows Domain: When there are a large number of users spread across different places, managing them individually is not possible, so a…

What a full-scope penetration testing assessment taught me about web application security, Windows, Linux, and Active Directory

Soupedecode 01 is a Windows Active Directory machine where i enumerate domain users, obtain an initial account through password spraying…

At a Glance Category Details Actor or Group Unattributed threat actor (Chinese-language artifacts observed) Activity Type Mass vulnerability scanning, credential harvesting, DCSync attacks Targets…

In today’s zero-trust security landscape, NTLM is limping while Kerberos is sprinting. Here is why enterprise migration is no longer…

This write-up covers the fundamentals of Active Directory authentication and demonstrates how weaknesses in NTLM and Kerberos can be…

The CRTA lab starts simple: an e-commerce website on a public IP. It ends with a golden ticket, a fully dumped NTDS, and admin on two…

Monitoring Active Directory: Understanding Authentication Events, Baselines, and Audit Policies Active Directory (also known as AD) is the technology used by most companies to administer users …

Q1: What is the name of the file stored on a domain controller that contains the password hashes of all domain accounts? (Format: ****.***)