1. BitLocker recovery keys living somewhere you don’t control You encrypted the disk. Good. Now ask the harder question: where does the recovery key actually go? On an Entra-joined, Intune-managed …
Introduction Most organizations protect their Microsoft 365 data well — but what about the sensitive files sitting on a file server that’s been running since 2014? The Microsoft Purview Information Protection …
Introduction Understanding how Active Directory password hashes can be extracted and cracked is essential knowledge for any security engineer or penetration tester. This post walks through the exact steps I …
Introduction Managing local administrator passwords on Windows endpoints has long been a pain point for IT and security teams. Before a centralised solution existed, many organisations set the same local …
Introduction Browsers ship with a lot of functionality enabled by default. That convenience comes with trade-offs: every extra feature increases the attack surface, and some defaults can expose more data …
What you’ll learn in this post Requirements Number of objects in Active Directory Memory Storage Fewer than 10,000 4 GB 70 GB 10,000 to 50,000 16 GB 100 GB 50,001 …
Introduction Host firewalls aren’t optional—they’re a core control in any modern endpoint security blueprint. Misconfigured or weakly governed rules can be abused to blind your EDR by silently blocking outbound …
Introduction After reading Defender for Identity In Depth, I decided to revise my approach to deploying Microsoft Defender for Identity (MDI). The book offered a wealth of technical insights and …
Local administrator accounts should be disabled wherever possible to reduce attack surface. When this is not feasible, Windows LAPS is used to securely manage local administrator passwords with automated rotation, …
How I Set Up and Monitor Attack Surface Reduction (ASR) Rules Introduction Attack Surface Reduction (ASR) is a vital cybersecurity strategy that reduces how attackers can exploit vulnerabilities in your …
