The AD CS Backdoor
Reading Time: 5 minutesAD CS attacks like ESC1 through ESC8 turn a certificate server into full domain takeover. Here’s what each misconfiguration is and how to audit for it.
Check Which Intune Policies Are Applied
Reading Time: 5 minutesHow to check which Intune policies are applied to a specific device, and how to go the other way and see which devices have a specific policy.
Is Intune a MAM or MDM? It’s Both, Here’s What Each One Does
Reading Time: 5 minutesIs Intune a MAM or MDM? It’s both. Here’s what the MDM side actually manages, what the MAM side actually protects, and when to use each.
Who’s in Domain Admins?
Reading Time: 5 minutesHow to audit Domain Admins and the other privileged AD groups, catch nested members and adminCount orphans, and cut membership down to what you actually need.
