Professionals and organizations can benefit from a variety of free guides and resources to inform their threat hunting. We take a look at operationalizing the JP CERT report and recommendations on detecting lateral movement using Windows Event Logs.
In this latest addition to our QOMPLX Knowledge series we discuss AS-REP Roasting attacks, takes advantage of a known weakness in the Kerberos protocol that can be exploited during initial authentication with a Key Distribution Center (KDC).
Microsoft’s Azure Advanced Threat Protection (ATP) is useful for detecting a range of attacks on Active Directory. But it has some serious shortcomings. Here are five ways attackers bypass ATP to wreak havoc.
Pass the Hash attacks are one of the most common methods of lateral movement within compromised IT environments. In this QOMPLX Knowledge blog post we do a deep-dive on this common form of attack and lateral movement.
NTLM relay attacks allow malicious actors to carry out man-in-the-middle attacks to steal hashed versions of user credentials which are then 'relayed' for use accessing other network resources.
Active Directory attacks and exploits of vulnerable identity infrastructure are part of more and more sophisticated intrusions. Here are 10 tips for locking down and monitoring your AD environment.
Subscribe today to stay informed and get regular updates from QOMPLX.
