41554 blogs · 4,417,066 posts Claim your blog

Record · corpus.blog/posts/01a0ca4f-b4f2-71ee-8e4e-18dc3792d9e0

Just Too Much Administration – Breaking JEA, PowerShell’s New Security Barrier

scriptjunkie.us · published 8 October 2016

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at scriptjunkie.us Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 15
Words captured: 3,318

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://www.youtube.com/watch?v=JDtUmue9mIw&feature=youtu.be&t=1766

youtube.com

https://twitter.com/jsnover

twitter.com

https://forums.grsecurity.net/viewtopic.php?f=7&t=2522

forums.grsecurity.net

https://msdn.microsoft.com/en-us/library/dn896648.aspx

msdn.microsoft.com

http://cqureacademy.com/blog/windows-internals/just-enough-administration-jea-step-by-step

cqureacademy.com

https://technet.microsoft.com/en-us/windows-server-docs/identity/ad-ds/manage/component-updates/command-line-process-auditing

technet.microsoft.com

https://technet.microsoft.com/en-us/sysinternals/sysmon

technet.microsoft.com

https://www.iis.net/learn/manage/configuring-security/application-pool-identities

iis.net

https://technet.microsoft.com/en-us/mt227395.aspx

technet.microsoft.com

https://blogs.technet.microsoft.com/ash/2014/11/10/dont-set-or-save-passwords-using-group-policy-preferences/

blogs.technet.microsoft.com

https://foxglovesecurity.com/2016/09/26/rotten-potato-privilege-escalation-from-service-accounts-to-system/

foxglovesecurity.com

https://www.securusglobal.com/community/2014/03/17/how-i-got-root-with-sudo/

securusglobal.com

http://aka.ms/jeadocs

aka.ms

https://msdn.microsoft.com/powershell/jea/readme

msdn.microsoft.com

https://github.com/PowerShell/JEA

github.com