logo
December 9, 2022 | Joe Dibley

Finding Abusable Active Directory Permissions with BloodHound

BloodHound is a powerful tool that identifies vulnerabilities in Active Directory (AD). Cybercriminals abuse this tool to visualize chains of abusable Active Directory permissions that can enable them to gain elevated rights, including membership in the powerful Domain Admin group. This...
August 25, 2021 | Kevin Joyce

Running LAPS in the Race to Security

Microsoft Local Administrator Password Solution (LAPS) enables organizations to manage local Administrator passwords across all their endpoints. When implemented correctly, it is an effective way to prevent some types of potential lateral movement and privilege escalation within your environment...
June 19, 2018 | Jeff Melnick

How to Add and Remove AD Groups and Objects in Groups with PowerShell

Microsoft Active Directory serves as a centralized point for the administration, authorization and authentication. In AD, access to network resources is granted to security principals, such as user accounts and computer accounts, and those permissions can change over time. To simplify access...
June 7, 2018 | Jonathan Blackwell

How to Create New Active Directory Users with PowerShell

The easiest way to create a new user in an Active Directory domain is to use either the Active Directory Users and Computers (ADUC) MMC snap-in or the Active Directory Administrative Center (ADAC). But what if these tools are not available or you need to perform a more complex task, such as...
September 6, 2016 | Jeff Melnick

Top 7 Free Security Tools for IT Admins

It’s free, master Jedi! We've gathered top 7 security freeware tools for sysadmins. These tools are supposed to help you make your job easier and troubleshoot security issues faster.  1. Netwrix Auditor for Active Directory. Free Community Edition This freeware from Netwrix provides...
September 22, 2011 | Chris Rich

Astounding need for analyzing Windows logon events

This week, we reviewed download poll results on two popular systems administration tools: Netwrix Logon Reporter and Netwrix Event Log Manager. Both tools help administrators gain visibility over their user activities and events that may be adversely impacting security or system performance....
...