Active Directory is still part of our lives - but can we make it more robust? Richard talks to Jerry Devore about his ongoing blog series on hardening Active Directory. Jerry talks about credential drift - decisions made in the past to turn down (or off!) security features in AD that made sense at the time but are no longer relevant. Most of these efforts only consume time - no products are involved, or the products are free. Check out the links in the show notes for Compliance tools that can help you find vulnerabilities in your infrastructure, including AD. Links:Pass-the-Hash White PaperMITRE ATT&CKWindows LAPSEnable NTLM 2 AuthenticationLDAP SigningForest and Domain Functional LevelsCredential GuardMicrosoft IntuneSecurity Compliance Toolkit and BaselinesRecorded November 20, 2023

Ver todos los episodios