All the posts on securing accounts but why does MS not allow
organizations to set password policies or allow admins to set password
minimums in Azure. For the love of God, how is 8 characters still a
default in Azure and why is there no way to change this??? Come on MS
get with it.
@Rafal_Fitt: Thanks for reaching and raising the question. Tactical
Recovery often focuses on rapid execution and broad coverage to minimize
the attack's impact as much as possible. The actions taken are modular
and guided by forensic data. If there is evidence of compromise, a
change will be initia...
Please note that AD Forest Recovery doesn't mention DPAPI backup
keys:"There currently is no officially supported way of changing or
rotating these DPAPI backup keys on the domain controllers. In
accordance with the document MS-BKRP, 3rd parties have the ability to
develop an application or script t...
Excellent idea and great work! I was playing around with this, wanted to
create a detection rule against but couldn't get UserID or DeviceID into
it.Any idea how to create a detection rule, for sure it will be a strong
one. Thank you for sharing this!
Latest Comments