Active Directory & Azure AD/Entra ID Security

This series of posts focuses on key Active Directory (AD) components that need to be secured in order to ensure AD security is leveled up.

This series of posts focuses on key Active Directory (AD) components that need to be secured in order to ensure AD security is leveled up. this post focuses on permissions on two important objects in AD: the Domain root and the AdminSDHolder object.

This series of posts focuses on key Active Directory (AD) components that need to be secured in order to ensure AD security is leveled up.

This series of posts focuses on key Active Directory (AD) components that need to be secured in order to ensure AD security is leveled up.

This series of posts focuses on key Active Directory (AD) components that need to be secured in order to ensure AD security is leveled up.

In Active Directory, there has been a method that’s been around for many years which changes the password last set date but not the actual password.

There are two main password attacks leveraged by adversaries; one is called Password Spraying and the other is called Kerberoasting.

This week let’s look at Active Directory domain permissions which are configured on the domain root and apply to the domain.

Group Managed Service Accounts (GMSAs) User accounts created to be used as service accounts rarely have their password changed.

At BSides Northern Virginia (BSides NoVa) in October 2025, I presented a talk on how to improve Entra ID security quickly.