Account distribution is one of those things that is very easy to do inside of SCOM, and it’s also very easy to do wrong. Unfortunately, this is the type of mistake that could inadvertently give an attacker a quick means to compromise the entire environment. First, let’s start with the basics: what and why. Account…
Tag: Cyber
Using SCOM to Detect Golden Tickets
For the three people that religiously read my blog, you know by now that I’ve been writing quite a bit on using SCOM to detect some of the anomalous events that are specific to an intruder in your environment. This is the first, of what will hopefully be a few rules needed to detect the…