corpus.blog
41,554 blogs · 5,063,431 posts Claim your blog
Record · corpus.blog/posts/01a0876c-48c7-7397-8ce9-1552064fee16

Tear Down The Castle - Part 2

dfir.ch · published 30 January 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at dfir.ch Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
16
Words captured
1,685

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://www.pingcastle.com/
pingcastle.com
https://0xdf.gitlab.io/
0xdf.gitlab.io
https://speakerdeck.com/fr0gger/windows-privileges
speakerdeck.com
https://www.volexity.com/blog/2023/03/07/using-memory-analysis-to-detect-edr-nullifying-malware/
volexity.com
https://0xdf.gitlab.io/2020/10/31/htb-fuse.html
0xdf.gitlab.io
https://techcommunity.microsoft.com/t5/microsoft-security-experts-blog/total-identity-compromise-microsoft-incident-response-lessons-on/ba-p/3753391
techcommunity.microsoft.com
https://learn.microsoft.com/en-us/windows-server/security/credentials-protection-and-management/protected-users-security-group
learn.microsoft.com
https://techcommunity.microsoft.com/blog/microsoftsecurityexperts/total-identity-compromise-microsoft-incident-response-lessons-on-securing-active/3753391
techcommunity.microsoft.com
https://adsecurity.org/?p=4056
adsecurity.org
https://github.com/m8sec/CVE-2021-34527
github.com
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
cisa.gov
https://web.archive.org/web/20240422094105/https://cube0x0.github.io/Pocing-Beyond-DA
web.archive.org
https://www.infosecmatter.com/top-16-active-directory-vulnerabilities/
infosecmatter.com
Most common Active Directory misconfigurations and default settings that put your organization at risk
blog.nviso.eu
https://www.ired.team/offensive-security-experiments/active-directory-kerberos-abuse/as-rep-roasting-using-rubeus-and-hashcat
ired.team
https://www.ired.team/offensive-security-experiments/active-directory-kerberos-abuse/from-dnsadmins-to-system-to-domain-compromise
ired.team
Elsewhere on dfir.ch (2)