Tag: active-directory

From Exposed RDP to Domain Encryption: Auditing Your Stack Against the Conti Playbook

pr0h0•September 12, 2026

An analysis of the Conti ransomware playbook that shows how exposed RDP, privilege escalation, lateral movement, and domain-level encryption can be used to audit and harden a modern stack.

cybersecurityransomwarerdp

Defending Active Directory Service Accounts Against Automated Kerberoasting: A Lab-Driven Guide

pr0h0•June 5, 2026

A lab-driven walkthrough for hardening Active Directory service accounts and building detections against automated Kerberoasting campaigns that exploit SPNs, weak encryption, and service account sprawl.

active-directorykerberoastingservice-accounts

When Attackers Use AI to Evade EDR: Hardening Build Agents Against Lateral Movement

pr0h0•June 3, 2026

A deep technical walkthrough on how attackers can use AI-assisted Active Directory tradecraft and EDR evasion to pivot from compromised build agents, and how to harden CI/CD infrastructure against lateral movement.

cybersecurityactive-directoryedr