https://blog.omiilgo.com/tags/active-directory/ Recent content in Active-Directory on Security Notes Hugo en-us Tue, 08 Aug 2023 11:00:00 +0800 https://blog.omiilgo.com/posts/des-in-active-directory-crypto/ Tue, 08 Aug 2023 11:00:00 +0800 https://blog.omiilgo.com/posts/des-in-active-directory-crypto/ Lab klist encryption types, supported-etype table, GPO ‘Configure encryption types allowed for Kerberos’ — inventory, not cracking. https://blog.omiilgo.com/posts/samaccountname-impersonation-class/ Sat, 11 Dec 2021 12:00:00 +0800 https://blog.omiilgo.com/posts/samaccountname-impersonation-class/ Lab event 4742/4768 samples redacted, computer-account naming checks, patch verification — no noPac exploit. https://blog.omiilgo.com/posts/active-directory-recon-notes/ Tue, 10 Nov 2020 13:00:00 +0800 https://blog.omiilgo.com/posts/active-directory-recon-notes/ Fake lab DC ldapsearch and PowerView-style listings, 4662/1644/4624 event IDs — inventory, not an attack playbook. https://blog.omiilgo.com/posts/kerberos-constrained-delegation-map/ Tue, 17 Mar 2020 11:00:00 +0800 https://blog.omiilgo.com/posts/kerberos-constrained-delegation-map/ Lab klist and setspn dumps redacted, constrained-delegation allow-list map — no ticket forging, no S4U abuse.