Roll over Kerberos decryption key for Seamless SSO computer account The Kerberos decryption key for the computer account is securely shared with Azure AD and should also be treated as sensitive. We highly recommend a rollover of the Kerberos decryption key for this computer account, at least every 30 days. Read more…
Unleash the PowerShell Ninja: Pentesting and Breach Hunting Like a Pro Engineers, sharpen your scripting skills! PowerShell isn’t just for managing systems; it’s a potent weapon in your pentesting arsenal. This ubiquitous tool, pre-installed on most Windows machines, offers unique advantages for uncovering vulnerabilities and hunting breaches. Why PowerShell for Read more…
Here’s an example of a PowerShell script that you can use to analyze security issues with Active Directory: This script will check for several common security issues with Active Directory, such as: Users with empty passwords Users with passwords that never expire Users with expired passwords Users with weak passwords Read more…
Cyber Threats Implement strong password policies: Ensure that your users are required to use strong and complex passwords and that they are changed regularly. You can also use multi-factor authentication (MFA) to add an extra layer of security to your users’ accounts. Monitor and audit AD activity: Regularly monitor your Read more…
Are you interested in an Active Directory Forest Recovery full plan for your company? It’s not an easy task to accomplish and not an easy task to document from A to Z, but I got it covered with international standards and proof by world-class subject matter experts in Active Directory Read more…
Quick Active Directory Health Check sending to your email , you can setup this script via schedule task and have it daily in your mailbox ! Function Getservicestatus($service, $server) { $st = Get-service -computername $server | where-object { $_.name -eq $service } if($st) {$servicestatus= $st.status} else {$servicestatus = "Not found"} Read more…