SYSVOL: Preventing a Horror Story

Semperis argues AI-driven attacks are outpacing identity teams as machine identities outnumber human ones 10:1, and urges building organization-wide cyber resilience around hybrid identity protection before the next crisis.

Final part of the CISA/NSA top-ten misconfigurations series from an AD perspective: misconfigured ACLs on shares, poor credential hygiene, and unrestricted code execution, with IOEs and IOCs.

Part 2 of the CISA/NSA top ten misconfigurations series for hybrid AD: flat networks, poor patch management, bypassed access controls, and weak MFA—explained with identity risks, IOEs, and IOCs.

Part 1 of the CISA/NSA top ten misconfigurations series for AD: default configurations, improper privilege separation, and lack of internal monitoring, with remediation guidance.

Four reasons to improve Entra ID recoverability: widespread misconfigurations, the recycle bin's limited 30-day protection, hard-deleted objects like service principals, and hybrid attack-path gaps.

AD security primer: AD holds the keys to most on-prem apps; top risks include unconstrained Kerberos delegation and over-permissioned users. Includes hardening best practices.