Feed on
Posts
Comments

Monthly Archive for October, 2023

My previous post was about resetting the krbtgt password, a simple maintenance task that few organisations do. It is just one example of many. Active Directory and other core systems need regular maintenance just like a car does. Resetting krbtgt. Cleaning out old accounts and computers. Reviewing privileged groups. Removing old trusts and old domain […]

Read Full Post »

The krbtgt account is the account whose password is used to sign every Kerberos ticket granting ticket in your domain. If an attacker gets its password hash, he can create his own tickets, golden tickets, for any user, with any rights, for as long as he likes. Changing the passwords of all admins doesn´t help. […]

Read Full Post »