I Asked the Domain Controller for a Ticket. It Handed Me a Service Account Password.
I did not break into anything. I did not exploit a bug. I logged in as the most powerless user…
Practical Azure architecture for security, identity, and regulated workloads
Practical Azure architecture for security, identity, and regulated workloads
Tag kerberos
I Watched One Stolen Hash Walk Into a Second Machine. Then LAPS Shut the Door.
Everyone knows pass-the-hash is dangerous. Almost nobody has watched it happen on their own network. There is a wide gap…
