Feed on
Posts
Comments

Monthly Archive for November, 2017

Why is Tier 0 membership a problem?

Posted in Security Architecture on Nov 19th, 2017

Why do I care about defining Tier 0 and why is it a problem to have a large Tier 0? It is all part of minimizing the attack surface. You want to minimize the places where it is possible to find a domain administrator account and exploit that. It is far easier to secure 20 […]

Read Full Post »

Defining Tier 0

Posted in Security Architecture on Nov 18th, 2017

Credential Theft is a bid problem today. Many of the attacks we see are targeting accounts rather than the individual computers. This is due to the cost of exploiting. As soon as you have a valid account it is much easier to travel around and try to find a domain admin account. As soon as […]

Read Full Post »