
What Is WIP? Windows Information Protection User Scope
Reading Time: 5 minutesWhat is WIP? Windows Information Protection, formerly Enterprise Data Protection, plus how the WIP user scope, protection modes, and platform matrix worked.
AI and Docker: Let Claude Code Build Your LAMP Stack
Reading Time: 5 minutesHow AI and Docker work together: point Claude Code at an empty folder and have it build a LAMP stack with a basic HTML page, from compose file to running containers.
gMSA: Kill Your Service Account Passwords
Reading Time: 4 minutesGroup Managed Service Accounts (gMSA) kill service account passwords for good. AD rotates a 240-byte password every 30 days so kerberoasting cant crack it.
The AD CS Backdoor
Reading Time: 5 minutesAD CS attacks like ESC1 through ESC8 turn a certificate server into full domain takeover. Here’s what each misconfiguration is and how to audit for it.
