spencer

@techspence

🛠️ Former Sysadmin, now Pentester | Microsoft MVP | Helping IT teams make their environment harder to attack | @SecurIT360 & @CyberThreatPOV

🏰AD Security Resource Kit ⬇️

spenceralessi.com/adsecuritykit

Joined November 2010

Replies Articles Media

Pinned
spencer
@techspence
12h
If you're an IT admin and you’re after quick wins, low hanging fruit and security hygiene-related items, these are some great tools to start with.
Article
Use these tools to secure Active Directory
Tools are a means to an end. If you only have a hammer, everything looks like a nail. Pick the right tool for the job. As you know my day job is pentesting. Internal pentesting specifically with a...
spencer
@techspence
9h
I’m a former sysadmin. I did IT for 10+ years. So I know what it’s like to be pulled in 100 different directions, working on 7 projects at a time, putting out fires and having to patch and fix pentest findings and do everything else that comes with a IT job. I say all of this
spencer
@techspence
11h
AI is awesome. It's an incredible innovation. But it comes at a cost... The cost is that those who are not in the trenches every day are being influenced by marketing and sensationalism on social media are being led to think that if they are not buying AI security tools that
spencer
@techspence
11h
Think I might have to stop recommending PingCastle @Netwrix I am such a big fan. Please change your mind on this. Release the risk indicators with ALL versions.
spencer
@techspence
14h
I just made a short video talking about this but for those prefer to read, here's the TLDR of how it works: 1. Set UPN to a privileged account’s SamAccountName 2. Request TGT for kadmin/changepw using the target SamAccountName (using NT-ENTERPRISE as the name type, and the