Core Infrastructure and Security Blog

Options
3,850
Jerry Devore on Apr 15 2024 03:01 PM
2,144
WillAftring on Apr 08 2024 06:41 AM
2,479
BrandonWilson on Apr 06 2024 07:24 PM
1,537
PavelYurenev on Apr 04 2024 09:00 AM
4,206
hspinto on Apr 01 2024 12:00 AM
2,339
khgandhi on Mar 28 2024 09:46 AM
1,855
Bruno Gabrielli on Mar 21 2024 01:00 AM
14.6K
Paul Bergson on Mar 19 2024 04:30 AM
3,340
fbinotto on Mar 14 2024 01:30 AM
4,952
PaulHarrison on Mar 11 2024 03:00 AM
3,720
sairashaik on Mar 06 2024 06:01 PM
10.3K
Jerry Devore on Mar 04 2024 06:38 AM
24.1K
Jason Cody on Feb 29 2024 07:12 AM
4,101
jonasoh on Feb 26 2024 03:35 AM
2,607
BrandonWilson on Feb 21 2024 08:22 PM
32.2K
DagmarHeidecker on Feb 19 2024 04:15 AM
15.4K
BrandonWilson on Feb 18 2024 04:35 PM
5,091
Arnab Mitra on Feb 15 2024 11:59 AM
5,212
hspinto on Feb 12 2024 12:00 AM
15.4K
Paul Bergson on Feb 05 2024 04:13 AM
25.2K
Paul Bergson on Jan 29 2024 05:20 AM
3,388
Bindusar on Jan 23 2024 08:27 AM
6,521
Arnab Mitra on Jan 18 2024 08:50 AM
3,449
jonasoh on Jan 15 2024 03:31 AM
7,034
jonasoh on Jan 08 2024 05:18 AM
15.7K
BrandonWilson on Jan 07 2024 10:40 AM
5,698
Arnab Mitra on Jan 03 2024 01:39 PM
16.3K
BrandonWilson on Dec 22 2023 02:13 PM
8,140
wernerrall on Dec 17 2023 11:00 PM
4,358
Michael Hildebrand on Dec 15 2023 04:00 AM

Latest Comments

Hi @Lee Dandridge - First enable msDS-SupportedEncryptionType to support AES on all accounts with a SPN then monitor 4769 events for any use of RC4. Additionally you should capture and analyze 4768 events for RC4 use which will identify RC4 using when requesting a TGT. My lasted blog post explains w...
0 Likes
Great information in the article and the comments; great to know there are such complete references out there. One question @Jerry Devore , we are trying to update all the supported ciphers on our internal domain and want to know which should come first, Remove the RC4 ciphers 1st, or set the msDS-S...
0 Likes
@pk_Tech It's seem similar my previous situation.For my last problem, I was point to the related OU and some of the user doesn't have the email so the script will stuck and stop to send. How I resolve the problem?I create another same OU, and move the user which do not have email to this OU.
0 Likes
Hello,thank you for sharing the script, it works perfectly after too much testings.just to let you know that we can also adjust the script to lookup users in a specific OU; this way you can send different emails to each group of users/departments.
0 Likes
Hello @v-liangchen , was it about authenticating from an Azure VM, an Arc-Enabled VM or from Automation Account? I am not aware of any change and the replacement you did was basically changing the target to a different resource not Azure Monitor. Did you grant the necessary permission to the managed...
0 Likes