Filter by technique: All T1190 T1486 T1566.002 T1055.001 T1195.001 T1059.001 T1204.002 T1203

Filter by company: All Intel Recorded Future Kaseya

• CrowdStrike Technical Risk Assessments Reveal Common Exposure Patterns

  CrowdStrike Blog

  T1558.003 80% T1588.006 78% T1558.004 37%
  2 days ago
• Shadow Admins in Active Directory: Hidden Privilege Paths Attackers Exploit

  Praetorian

  T1552.004 56% T1003.006 53% T1558.003 36%
  2026-04-15
• Reflecting on Your Tier Model: CVE-2025-33073 and the One-Hop Problem

  Praetorian

  T1558.003 71% T1558.001 70% T1550.003 68%
  2026-03-27
• Proactive Preparation and Hardening Against Destructive Attacks: 2026 Edition

  Mandiant

  T1021.001 99% T1021.006 99% T1649 93%
  2026-03-06
• Deceptive-Auditing: An Active Directory Honeypots Tool

  Black Hills InfoSec

  T1098 76% T1548.002 65% T1558.003 53%
  2026-01-07
• Gladinet CentreStack/Triofox: Cryptography Vulnerability | Huntress

  Huntress

  T1059.001 100% T1486 91% T1190 83%
  2025-12-18
• The OID Problem: Writing LDAP Detections That Actually Work

  Huntress

  T1087.002 98% T1558.003 96% T1003.006 80%
  2025-12-16
• Abusing Delegation with Impacket (Part 2): Constrained Delegation

  Black Hills InfoSec

  T1003.006 85% T1558.003 77% T1550.003 70%
  2025-11-12
• Gootloader | Threat Detection Overview

  Huntress

  T1055.001 99% T1059.001 99% T1003.006 96%
  2025-11-05
• Abusing Delegation with Impacket (Part 1): Unconstrained Delegation

  Black Hills InfoSec

  T1558 72% T1558.003 63% T1550.003 62%
  2025-11-05
• Impacket Cheatsheet

  Black Hills InfoSec

  T1557.001 96% T1558.003 85% T1003.006 59%
  2025-08-06
• Recutting the Kerberos Diamond Ticket

  Huntress

  T1558.003 87% T1201 73% T1558.004 63%
  2025-06-25
• Abusing S4U2Self for Active Directory Pivoting

  Black Hills InfoSec

  T1550.002 92% T1136.001 80% T1550.003 68%
  2025-06-11
• Navigating Through The Fog

  The DFIR Report

  T1572 99% T1046 99% T1486 98%
  2025-04-28
• PerfMon! What Is It Good For? | Huntress

  Huntress

  T1558.003 86% T1087.002 81% T1558.004 80%
  2025-01-23
• Attack Tactics 9: Shadow Creds for PrivEsc w/ Kent & Jordan

  Black Hills InfoSec

  T1572 98% T1557.001 88% T1021.001 87%
  2025-01-20
• One Active Directory Account Can Be Your Best Early Warning

  Black Hills InfoSec

  T1110.003 99% T1558.003 81% T1548.002 59%
  2025-01-16
• Clear, Concise, and Comprehensive: The Formula for Great SOC Tickets

  Black Hills InfoSec

  T1558.003 79% T1558 31%
  2024-10-17
• Making Sense of Alphabet Soup: 16 Security Terms and Acronyms You Should Know | Huntress

  Huntress

  T1056.001 100% T1486 99% T1219 97%
  2024-09-18
• Abusing Active Directory Certificate Services (Part 4)

  Black Hills InfoSec

  T1649 95% T1558.003 36%
  2024-05-30
• Scattered Ransomware Attribution Blurs Focus on IR Fundamentals

  Coveware

  T1486 99% T1219 99% T1068 97%
  2023-10-30
• Abusing Active Directory Certificate Services (Part 1)

  Black Hills InfoSec

  T1649 95% T1558.003 81% T1558 37%
  2023-10-05
• Shenetworks Recommends: 9 Must Watch BHIS YouTube Videos

  Black Hills InfoSec

  T1110.003 90% T1558.003 77% T1557.001 51%
  2023-04-13
• Impacket Defense Basics With an Azure Lab

  Black Hills InfoSec

  T1557.001 89% T1558.003 88% T1003.006 82%
  2022-07-26
• Webcast: Kerberos & Attacks 101

  Black Hills InfoSec

  T1558.003 77% T1558 51%
  2020-05-26
• Securing the Cloud: A Story of Research, Discovery, and Disclosure

  Black Hills InfoSec

  T1525 88% T1558.003 86%
  2019-08-21
• A Toast to Kerberoast

  Black Hills InfoSec

  T1558.003 92% T1090.001 87% T1090.002 66%
  2017-05-08
• What’s trust among schoolchildren: Kerberos Authentication Explained

  Black Hills InfoSec

  T1558.003 77% T1558 51% T1558.004 42%
  2016-05-13