Tools, software, concepts, hardenings or settings designed to protect a Windows Client, Server or Domain from beeing compromised.
Around October last year one of our production Windows Server 2025 RDSH was suddenly weirdly unresponsive. It accepted Remote Desktop sessions but was unable to produce a graphics session, just a black screen and pretty quick an error message. The network was fine, so i called a reboot via RemotePS, which went through and seemingly…
Kerberoasting, Silver Tickets, Golden Tickets, Pass-the-Ticket, gMSAs, Kerberos Armoring… have you ever wondered what all of this stuff is about? To really understand it, we need to focus on the Kerberos authentication process and how it is implemented in Windows. In this article, we’ll discuss what Kerberos is, why it is essential for Windows to…
This is the first episode of a new series called Attack & Defend! In this series, I’ll demonstrate different types of attacks as well as the corresponding defensive measurements to protect against them. If you’d like to see an overview of all the episodes, click here. Today’s episode focuses on LLMNR, NBT-NS, and mDNS poisoning…
Microsoft has announced that it will automatically enable Credential Guard for Windows 11 and Windows Server 2025, as long as the necessary prerequisites are met. In this article, you will learn what Credential Guard is, which prerequisites are required, and how you can ensure that all Windows machines in your network are protected by Credential…
