Menu / Category

Active Directory

strong & dark · 9 items

The thing with LDAP, LDAPS and Active DirectoryAug 6, 2026Why LDAPS rarely fixes what security reports worry about, why you can't just block port 389, and what actually protects LDAP in Active Directory.11 min · Cappuccino Configure Kerberos ArmoringJul 28, 2025Kerberos Armoring (FAST) protects the Kerberos exchange against offline brute force, replay and tampering. How to enable it in your domain with a GPO.1 min · Espresso#kerberos How NTLM works in Active DirectoryMay 7, 2025How NTLM proves that you know a password without sending it, what the domain controller does, the difference between NTLMv1 and NTLMv2, and why Microsoft is phasing it out.9 min · Cappuccino#ntlm#active-directory#authentication ADFS InstallationJan 27, 2025Basic installation guide for Active Directory Federation Services4 min · Espresso#adfs Pass the Hash Attack ExampleJan 22, 2025Example of a pass the hash attack3 min · Espresso#pass-the-hash How Kerberos works in Active DirectoryJan 16, 2025How Kerberos works in Active Directory, step by step: the TGT, the service ticket and the request to the service, and why no password crosses the network.6 min · Cappuccino#kerberos Issue VCSA Certificate with Windows PKIJan 9, 2025Replace the self-signed vCenter (VCSA) certificate with a SubCA certificate from your Windows PKI, using the VCSA Certificate Manager and WinSCP.10 min · Cappuccino#ad-cs#pki#vmware#vcsa Installation guide for a Windows PKIDec 20, 2024Step-by-step guide for a two-tier Windows PKI with root CA, sub CA and a separate CRL server, plus certificate templates, OCSP and web enrollment.36 min · French Press#ad-cs#pki Secure Active Directory - Part 1Sep 9, 2024Part 1 of the guide to a secure Active Directory2 min · Espresso