Tools, software, concepts, hardenings or settings designed to protect a Windows Client, Server or Domain from beeing compromised.
Kerberoasting, Silver Tickets, Golden Tickets, Pass-the-Ticket, gMSAs, Kerberos Armoring… have you ever wondered what all of this stuff is about? To really understand it, we need to focus on the Kerberos authentication process and how it is implemented in Windows. In this article, we’ll discuss what Kerberos is, why it is essential for Windows to…
This is the first episode of a new series called Attack & Defend! In this series, I’ll demonstrate different types of attacks as well as the corresponding defensive measurements to protect against them. If you’d like to see an overview of all the episodes, click here. Today’s episode focuses on LLMNR, NBT-NS, and mDNS poisoning…
Microsoft has announced that it will automatically enable Credential Guard for Windows 11 and Windows Server 2025, as long as the necessary prerequisites are met. In this article, you will learn what Credential Guard is, which prerequisites are required, and how you can ensure that all Windows machines in your network are protected by Credential…
