Menu / Tag

#kerberos

4 items with this flavour

ADHardenKit: Hardening AD Without Breaking ItOct 7, 2026LDAP signing, SMB signing, NTLM, Kerberos with AES only. Every hardening checklist has them. I wrote a tool that turns them on in an order that doesn't break the domain.Tools5 min · Cappuccino#active-directory#windows-server#powershell#hardening NTLM-Analyzer: Find Out Who Still Uses NTLMOct 3, 2026Windows logs a lot of NTLM activity, but you have to piece it together yourself. I built a tool that shows which users and programs still use NTLMv1 or NTLMv2, and what already runs over Kerberos.Tools6 min · Cappuccino#active-directory#ntlm#kerberos#auditing Configure Kerberos ArmoringJul 28, 2025Kerberos Armoring (FAST) protects the Kerberos exchange against offline brute force, replay and tampering. How to enable it in your domain with a GPO.Active Directory1 min · Espresso#kerberos How Kerberos works in Active DirectoryJan 16, 2025How Kerberos works in Active Directory, step by step: the TGT, the service ticket and the request to the service, and why no password crosses the network.Active Directory6 min · Cappuccino#kerberos