What is Azure Active Directory?
Many are familiar with Active Directory, the on-premises directory and authentication system that is available with Windows Server, but...
top of page
Search
Sean Metcalf
- Mar 21, 2019
- 6 min
There’s Something About Service Accounts
Service accounts are that gray area between regular user accounts and admin accounts that are often highly privileged. They are almost...
8850
-
- Feb 12, 2019
- 7 min
Mitigating Exchange Permission Paths to Domain Admins in Active Directory
A blog post was published by Dirk-jan Mollema titled "Abusing Exchange: One API call away from Domain Admin " (https://dirkjanm.io/abusin...
1,8220
Sean Metcalf
- Dec 3, 2017
- 27 min
Transcript for DEFCON 2017 Talk: Hacking the Cloud (Gerald Steere & Sean Metcalf)
“DEF CON 25 (2017) – “Hacking the Cloud” with Gerald Steere (@DarkPawh)” Gerald Steere, Microsoft C+E Red Team Sean Metcalf, Trimarc CTO...
520
Sean Metcalf
- Nov 22, 2017
- 28 min
Transcript BSidesCharm Detecting the Elusive: Active Directory Threat Hunting
“Detecting the Elusive: Active Directory Threat Hunting” Sean Metcalf, Trimarc CTO BSides Charm (Baltimore, MD) April 2017 Transcript...
2140
Sean Metcalf
- Feb 17, 2017
- 13 min
Trimarc Research: Detecting Kerberoasting Activity
Kerberoasting can be an effective method for extracting service account credentials from Active Directory as a regular user without...
3,7110
Sean Metcalf
- Feb 10, 2017
- 4 min
Trimarc Research: Detecting Password Spraying with Security Event Auditing
A common method attackers leverage as well as many penetration testers and Red Teamers is called "password spraying". Password spraying...
5,9150
bottom of page