spencer

@techspence

🛠️ Former Sysadmin, now Pentester | Microsoft MVP | Helping IT teams make their environment harder to attack | @SecurIT360 & @CyberThreatPOV

🏰AD Security Resource Kit ⬇️

Pinned
spencer
@techspence
Oct 27
When it comes to dangerous Active Directory permissions you have to know.. 1) What to look for 2) Where to look Quick example video in this article...
Article
Disabled Doesn't Mean Safe in Active Directory
One of the hard parts about identifying dangerous permissions in Active Directory is that sometimes the attack paths are not obvious. Disabling an account in Active Directory doesn’t necessarily
1
spencer
@techspence
8h
The fuel required to power the nuclear submarine would be an additional cost above and beyond the sub itself ;)
Mike Manrod
@CroodSolutions
9h
Replying to @MikeTalonNYC @rekdt and 2 others
But, what if Microsoft made submarines?
GIF
4
spencer
@techspence
10h
The reason it helps to keep a “cleaned up”environment is because when it is time to perform audits or to do hardening, there’s less weeds you’ve got to wade through.
2
spencer
@techspence
11h
How to be a BAD ciso... focus ONLY on AI
a16z
@a16z
13h
In a single year, AI has rewritten the security priority list for CISOs. Attackers are moving faster. Bain estimates AI compresses a typical cyberattack from about four weeks to about 18 hours, and models keep getting better at finding and exploiting weaknesses. There's also
16
spencer
@techspence
11h
Don’t believe the false narrative that says all change is good. Change doesn’t mean something is automatically better and it doesn’t necessarily equate to progress either.
2