"1 security posture of businesses making it too easy for the bad guys" Please fix "low-hanging fruit" in Active Directory. These are the security items attackers use to compromise AD & are quickly resolved Use this free PowerShell script & article to fix hub.trimarcsecurity.com/post/securing-…

Recon-ng Tutorial Part 1 Install and Setup securenetworkmanagement.com/recon-ng-tutor… Part 2 Workspaces and Import securenetworkmanagement.com/recon-ng-tutor… Part 3 Usage and Reporting securenetworkmanagement.com/recon-ng-tutor… #infosec #pentest #OSINT #redteam

Detection Lab Collection of Packer & Vagrant scripts that quickly bring a Windows AD online, complete with a collection of endpoint security tooling & logging best practices 😎 WriteUp medium.com/@clong/introdu… Code github.com/clong/Detectio… #infosec #pentest #blueteam #redteam

It's been long overdue, but my part 2 blog on Active Directory forest trusts is finally here! This blog is about trust transitivity and on the finding on CVE-2020-0665 which was a trust bypass by faking a domain. Enjoy the (long) read: dirkjanm.io/active-directo…

Exchange Exploit Leads to Domain Wide Ransomware TTR: 42 Hours Initial Access: Exchange Exploited (ProxyShell) Discovery: ipconfig, nslookup, ping, KPortScan, etc. Execution: Fast Reverse Proxy & Plink Lateral Movement: RDP Impact: Data Encryption thedfirreport.com/2021/11/15/exc…

I just used github.com/countercept/ch… for a real IR. 😲 unbelievable! The best IR tool in my tool belt, bar none. Customer gave me 50 gigs of EVNT logs and I had answers in minutes. MINUTES!

1\ #dfirtips #dfir #infosec Windows Event Logs can be daunting especially if it's a lot. No one can actually sit in front of their computer to check each of those logs one by one thru a manual approach. Here are some of the newest EVTX tools that can really save our lives as IR

Black Friday is here! Get FREE recurring API credits if you like + retweet this tweet. If we get up to 100 RTs everyone gets 100 recurring monthly API credits. If we get over 100 RTs, everyone gets the # of API credits in the amount of RTs. Cut out time: November 28th 10AM EST.

The age-encryption.org stickers are here and they are ✨shiny✨ First 20 RTs get a few in the mail if you DM me an address!

Happy New year to all folks

If your security team is concerned about allowing use because they aren't sure how it works. Here's the deep dives you can send them: Provisioning: docs.microsoft.com/en-us/windows/… Authentication: docs.microsoft.com/en-us/windows/… It's likely better than anything else we're doing today ;)

WinAPi Search - Search a single or multiple binary PE files by Win32 function name. dennisbabkin.com/winapisearch/

One last blog post this year: Intune best practices 🏆oceanleaf.ch/intune-best-pr… #MSIntune #MEMpowered

I highly recommend scanning On-Prem MS Exchange instances with our free scanner THOR Lite nextron-systems.com/thor-lite/ We still try to channel out all Exchange exploitation related rules into the free version, bc I think it's such a great show case : see nextron-systems.com/2021/03/18/new…

Say goodbye to expensive IT training. gitbit.org offers expert training for free, including the Microsoft 365 Security Administrator certificate. #ITpros #Microsoft365

What is this week new in #Microsoft #Intune? You can read it here: learn.microsoft.com/en-us/mem/intu… #Microsoft365 #MEM #EMS #MEMPowered

If you want to learn these for FREE: SQL Microsoft Excel Data Visualization Data Analysis Business Analysis Resume Tips Project Management Interview Tips Check this Google drive link: drive.google.com/drive/mobile/f… Don't forget to retweet. cc: L.A.M.Z

Since everyone is asleep, let me share this goldmine. I received more than 100 DMs from UI/UX techies, so here's a completely FREE 6 GB folder on: ✅Product design ✅Graphic design ✅Web design ✅UX design ✅Webflow ✅Figma ✅UI/UX Don't thank me. RT. shorturl.at/pDJY6

SYSTEM DESIGN PLAYBOOK: Giveaway Alert (Valid for 24 hours only)! • System design foundations. • Condensed notes to read for system design interviews. • Must know concepts from real-world software engineering case studies. To get it: 1 Follow Neo Kim [MUST] 2