Active Directory Hardening Series – Part 4 – Enforcing AES for Kerberos

Hi everyone, Jerry Devore here again with another installment in my series on Active Directory hardening. This time I want to revisit a topic I previously wrote about in September of 2020 which is enforcing AES for Kerberos. Since I wrote that blog post a few new tips have come…

15/04/2024Core Infrastructure and Security Blog

Share:

You may be interested in

Proxies, proxies everywhere but still no Internet. Overview of the Windows Proxies
Core Infrastructure and Security Blog,
Howdy everyone, a quick tangent from our regularly scheduled Introduction to Network Trace Analysis series to talk about the Windows Proxy ecosystem. A Windows Proxy configuration can be a little…
08/04/2024
The Twelve Days of Blog-mas: No.12 – Copilot(s) – You’re AI Assistant(s)
Core Infrastructure and Security Blog,
Tally ho! Now, you didn't really think I would go for 12 without one about Copilot, did you? Our AI/ML efforts have been on-going for a long time,…
15/12/2023
Addressing Common Entra ID Protection Deployment and Maintenance Issues
Core Infrastructure and Security Blog,
Entra ID tenants face threats from bad actors who use password spray attacks, multifactor spamming, and social phishing campaigns. Many organizations do not prioritize protecting Entra ID because they worry…
30/05/2024
Check This Out! (CTO!) Guide (July 2023)
Core Infrastructure and Security Blog,
Hi everyone! Brandon Wilson here once again with this month’s “Check This Out!” (CTO!) guide. These posts are only intended to be your guide, to lead you to some content…
10/08/2023
Check This Out! (CTO!) Guide (December 2023)
Core Infrastructure and Security Blog,
Hi everyone! Brandon Wilson here once again with this month’s “Check This Out!” (CTO!) guide. These posts are only intended to be your guide, to lead you to some…
07/01/2024
Using Automation Runbook Webhooks To Alert on Databricks Status Updates
Core Infrastructure and Security Blog,
Description This guide walks you through the process of setting up and utilizing webhooks to receive Databricks status alerts, process them using Azure Automation Runbook, and trigger notifications to administrators…
28/08/2023
The Twelve Days of Blog-mas: No.10 – It’s a Multi-Tenant and Cross-Platform World: Part II
Core Infrastructure and Security Blog,
In Part I of this mini-series, I discussed some of the new hotness around multi-tenant capabilities in our Entra ID space. In Part II, I'll cover cross-platform support across several…
13/12/2023
Introduction to Network Trace Analysis 4: DNS (it’s always DNS)
Core Infrastructure and Security Blog,
Howdy everyone! I'm back to talk about one of my favorite causes of heartache, the domain name system (DNS). This will be our first foray into an application layer protocol. The…
11/12/2023
Infrastructure as Code Testing with Azure Policy
Core Infrastructure and Security Blog,
Have you ever wanted to test an ARM template or Bicep template against Azure Policy deployed in your environment – so that you could determine if the resource was going…
25/09/2023
Microsoft will require MFA for all Azure users
Core Infrastructure and Security Blog,
This July, Azure teams will begin rolling out additional tenant-level security measures to require multi-factor authentication (MFA). Establishing this security baseline at the tenant level puts in place additional security…
14/05/2024
Active Directory Hardening Series – Part 1 – Disabling NTLMv1
Core Infrastructure and Security Blog,
Active Directory Hardening Series - Part 1 – Disabling NTLMv1 Hello everyone, Jerry Devore back again after to along break from blogging to talk about Active Directory hardening. In…
21/09/2023
Check This Out! (CTO!) Guide (November 2023)
Core Infrastructure and Security Blog,
Hi everyone! Brandon Wilson here once again with this month’s “Check This Out!” (CTO!) guide, and apologies for the delay! These posts are only intended to be your guide,…
22/12/2023