What You’re Missing: Proper LAN Manager Authentication Levels

Semperis argues AI-driven attacks are outpacing identity teams as machine identities outnumber human ones 10:1, and urges building organization-wide cyber resilience around hybrid identity protection before the next crisis.

WinRM over HTTP isn't the cleartext disaster people assume — payloads are encrypted at the application layer — and the post explains when HTTPS genuinely adds value and when it doesn't.

Why the common 'switch from LDAP to LDAPS' recommendation is mostly ineffective: AD members always use port 389, common workarounds fail, and the post explains what actually hardens AD LDAP.

Argues the leaked Windows XP and Server 2003 source code is an underused red team resource, since Kerberos and NTLM implementations remain mostly unchanged and reveal what MS-* specifications omit.

This post focuses on obtaining domain administrative privileges from a local administrator or domain user account. Once the initial steps have been taken to obtain local administrative access on a Windows operating system, the natural next steps are to gain domain user and domain administrative privileges.

Semperis introduces Migrator for Active Directory 2.0, an update aimed at helping organizations move Active Directory environments with confidence and greater operational control.