decalage2 / awesome-security-hardening

A collection of awesome security hardening guides, tools and other resources
5.37k stars 568 forks source link

add AD and Active Directory Certificate Services (AD CS) hardening recommendations #86

Open decalage2 opened 1 year ago

decalage2 commented 1 year ago

https://twitter.com/malmoeb/status/1632634227178061825

Actual reference: https://specterops.io/wp-content/uploads/sites/3/2022/06/Certified_Pre-Owned.pdf Certified Pre-Owned Abusing Active Directory Certificate Services page 97, section Defensive Guidance

See also other AD hardening tips: 2) https://twitter.com/malmoeb/status/1632981980395470850 3) https://twitter.com/malmoeb/status/1633346261876187136 4) https://twitter.com/malmoeb/status/1633719085446955012 5) https://twitter.com/malmoeb/status/1634072279125508097