Service accounts are that gray area between regular user accounts and admin accounts that are often highly privileged. They are almost...

A blog post was published by Dirk-jan Mollema titled "Abusing Exchange: One API call away from Domain Admin " (...

“DEF CON 25 (2017) – “Hacking the Cloud” with Gerald Steere ( @DarkPawh )” Gerald Steere, Microsoft C+E Red Team Sean Metcalf, Trimarc...

“Detecting the Elusive: Active Directory Threat Hunting” Sean Metcalf, Trimarc CTO BSides Charm (Baltimore, MD) April 2017 Transcript...

Kerberoasting can be an effective method for extracting service account credentials from Active Directory as a regular user without...

A common method attackers leverage as well as many penetration testers and Red Teamers is called "password spraying". Password spraying...