When users access computer systems, they do so by entering a password. The challenge with this authentication method is that if someone maliciously obtains the password, he can take on the user’s identity and gain access to an organization’s network. Organizations need a better way to protect th...

Let us break down, arguably the most complex of the three delegation type attacks. Constrained delegation allows you to configure which services an account can delegate to, which can possibly limit the potential exposure if a compromise occurred When constrained delegation is set on an account: Does...

AS-REP Roasting is a technique that exploits a weakness in the Kerberos protocol during initial authentication with the key distribution centre(KDC) During the authentication stage, a user requests a Ticket Granting Ticket (TGT) from the KDC in the form of an AS-REQ packet.If the account exists, t...

Access privileges for resources in Active Directory Domain Services are usually granted through the use of an Access Control Entry (ACE).  Access Control List entries describe the allowed and denied permissions for a principal in Active Directory against a securable object (user, group, compute...