The AD CS Backdoor
Reading Time: 5 minutesAD CS attacks like ESC1 through ESC8 turn a certificate server into full domain takeover. Here’s what each misconfiguration is and how to audit for it.
Working In the System
Reading Time: 5 minutes Working Within the System: Notes from a Sysadmin I’ve been doing this work long enough to watch the same pattern play out over and over. An admin gets handed a problem, sees a cleaner way to solve it, and instead of working the problem inside…
For the Love of LDAP
Reading Time: 5 minutes Over the past 5 years, I have heard the conversation of how do we move our AD to the cloud. Oh the cloud, loud, mild, my child, it’s not as easy as you think. There are things in older environments that can tur some people’s feathers if it ever…
Let’s Match it up
Reading Time: 14 minutes Growing up, I watched my parents do this thing that feels kind of rare now. They didn’t just go to work. They built a work life. Like the kind that bleeds into the community, where people know your name, and your effort leaves marks in places…
