I Asked the Domain Controller for a Ticket. It Handed Me a Service Account Password.
I did not break into anything. I did not exploit a bug. I logged in as the most powerless user…
Practical Azure architecture for security, identity, and regulated workloads
Practical Azure architecture for security, identity, and regulated workloads
Tag Security
I Watched One Stolen Hash Walk Into a Second Machine. Then LAPS Shut the Door.
Everyone knows pass-the-hash is dangerous. Almost nobody has watched it happen on their own network. There is a wide gap…
Fail-Closed VPN Gateway on Linux: A Design Deep Dive
A fail-closed VPN gateway routes selected devices through a VPN tunnel and guarantees one thing above all else. If the…
Azure Cache for Redis Retirement: The Real Cost of Migrating to Azure Managed Redis
The Azure Cache for Redis retirement is not a SKU cleanup and it is not a rename. It is a…
The Five Azure Landing Zone Decisions That Actually Matter
Most Azure landing zone decisions get made before anyone calls them decisions. The organization buys into the Cloud Adoption Framework,…
