About Show #914
Active Directory is still part of our lives - but can we make it more robust? Richard talks to Jerry Devore about his ongoing blog series on hardening Active Directory. Jerry talks about credential drift - decisions made in the past to turn down (or off!) security features in AD that made sense at the time but are no longer relevant. Most of these efforts only consume time - no products are involved, or the products are free. Check out the links in the show notes for Compliance tools that can help you find vulnerabilities in your infrastructure, including AD.
Links:
- Pass-the-Hash White Paper
- MITRE ATT&CK
- Windows LAPS
- Enable NTLM 2 Authentication
- LDAP Signing
- Forest and Domain Functional Levels
- Credential Guard
- Microsoft Intune
- Security Compliance Toolkit and Baselines
Recorded November 20, 2023