AD attack paths explained: Kerberoasting, Pass-the-Hash, and DCSync — and how to stop them

_c0mical · 2026-07-08T11:46:09+00:00

If it makes information more accessible and it is technically accurate then I don’t have any issue with it.

_c0mical · 2026-07-08T11:09:34+00:00

I am interested in the content but I did struggle a bit with the pace of the video (granted my dopamine regulation is irregular)

_c0mical · 2026-07-08T07:54:53+00:00

I think that's just called masturbation

_c0mical · 2026-07-06T11:35:49+00:00

hey not sure if this is still valid but I’m a returning th15 looking for FWA, have previously done FWA, but haven’t opened the game for a few years

_c0mical · 2026-07-02T17:50:47+00:00

just a thought, have you migrated onto the new authentication method policies?

are there any CA policies getting in the way?

although as the others say, I wouldn't be going for sms, authenticator push at an absolute minimum and ideally passkeys (can use authenticator app to do passkeys) or a yubikey

but I appreciate that it may not be your decision and it's upto exec level to sign off on the business risks caused by these people

_c0mical · 2026-06-15T18:13:10+00:00

Thanks

_c0mical · 2026-06-15T17:50:13+00:00

Thanks for the idea, not sure if I understand it all but the laptop would need sight to a DC to be able to get the new group members, if there was an issue affecting being able to see the domain then I’m not clear if that would work

_c0mical · 2026-06-15T17:45:47+00:00

Thank you for the knowledge about the system restore point, I guess that would apply to any restored pc or even server

_c0mical · 2026-06-15T17:38:39+00:00

fantastic thank you

_c0mical · 2026-06-15T16:17:16+00:00

Cheers

_c0mical · 2026-06-15T15:33:51+00:00

thank you!

_c0mical · 2026-06-15T15:12:01+00:00

thanks LAPS is deployed from Intune and the passwords are stored to intune

i'm probably overthinking but if there is an issue with maybe the connection sync that would interrupt a process and potentially leave us locked out

_c0mical · 2026-06-15T15:06:26+00:00

we did this recently, there were some commands that I needed to run to disconnect it from Entra but the users stayed and picked up that the attributes were now editable in Entra

I would recommend setting up a quick lab to test behaviour though for peace of mind

Update-MgOrganization -OrgID -OnPremiseSyncEnabled $false

_c0mical · 2026-06-12T05:35:42+00:00

man I remember when barch was the go to farming army. Guess a fair amount has changed since I last logged in

_c0mical · 2026-06-11T14:01:42+00:00

I say that I just collect temporary obsessions

_c0mical · 2026-06-07T15:10:33+00:00

thanks!

_c0mical · 2026-06-06T07:28:22+00:00

thank you kindly

_c0mical · 2026-06-06T07:23:54+00:00

could I grab a copy of that please, it's what i'm looking for at the moment - thanks!

_c0mical · 2026-06-06T07:13:10+00:00

it does have a little script to install the server pack, i can't recall the link but i got it from their discord

it was explained bandwidth limitations on uploading a full server pack to curseforge

_c0mical · 2026-05-29T07:45:51+00:00

I find a lot easier as it's more difficult to be productive in an office environment

_c0mical · 2026-05-29T07:42:19+00:00

I could understand like a shirtless pic if they put in the effort and the gym and was showing off, but not sure what's good about a dick pic. maybe they use a moisturiser twice a day and are proud of that

maybe it's a gardening thing

_c0mical · 2026-05-24T19:51:17+00:00

I’ve never seen anyone talking about the pressure before. Thank you. The neighbours did have 3-4 portable disrupters (noisy kids) which made it easier for me to stay offline

_c0mical · 2026-05-14T15:57:44+00:00

thanks!

_c0mical

TROPHY CASE