no wonder 🥝🏳️‍🌈 Benjamin Delpy says a CA server should be secured as if it was a DC, got access, exported certificate, imported the certificate in another host and I'm generating TGTs for any user in the domain with it

Most days it's infosec. But today, it's RONALDOOOOOO! What a coup!

Hooooooly shit.

In the spirit of people being wrong on the internet, I wanted to briefly discuss something people rarely get right: the computer account password.

🧵 1/ Two days ago I shared this image to demonstrate how many unique paths exist for a single behavior. At the time I didn't know how to use it, but today I realized it shows why red teams, MITRE evals, & vendor tests can't answer Technique coverage questions without change.

Sure. If the mission is to rob a bank 😂