AD CS Containment: Follow the Certificate, Not the Password
A password reset does not revoke an AD CS certificate. Trace ESC1 and ESC8 issuance, validate revocation delivery, and contain existing Kerberos access.
-
-
Autonomous Pentest Agent: AI, Red Team, and Attack Chains
Autonomous Pentest Agents can accelerate Red Team operations, but they also introduce risk around prompt injection, tool misuse, scope control, evidence quality, and detection.
-
Defensive Corporate OSINT: A Red Team Guide to Mapping Exposure, Identity, and Cloud
An advanced guide to defensive corporate OSINT from a Red Team perspective, covering identity, cloud, APIs, detection, and real attack chains.
-
Create a GPO That Enables SMB Signing
How to create and apply a Group Policy Object that enables SMB signing in Active Directory, with validation steps and operational considerations.
