dcsimg

Configure ‘Break Glass’ Emergency Access for Azure Active Directory

In cloud computing generally and in Microsoft Azure specifically, the shared responsibility model means that both Microsoft and you (the customer) have a role to play in ensuring service high availability. … [Read more...]

Protecting Local Credentials with LAPS

One of the most significant issues faced in a Microsoft Windows environment is the ability to steal credentials and utilize these credentials to move throughout the network laterally. … [Read more...]

Part 3 – Getting Started with Azure Automation: Managing Assets

In this article, you will learn about Azure Automation Assets. You will also learn how to add assets to your automation account that your runbooks can then use at runtime. … [Read more...]

Setting Up A Persistent SSH Tunnel

Adversaries can utilize MITM attacks to steal credentials, even when they are protected by SSL. … [Read more...]

Sidecar and Parallels Desktop 15 for Mac

I’ve been using macOS® Catalina since the day it was publicly announced on June 4, 2019. That evening I had the first developer preview of Catalina running in a virtual machine (VM) in Parallels Desktop® 15 for Mac. While Catalina has many interesting features, the one I find most useful is Sidecar. Sidecar enables you to use an iPad® as a secondary screen on your Mac®. Figure 1 shows a midway … [Read more...]

Detecting and Defending Against Pass the Hash Attacks

A pass the hash attack is a common attack vector utilized by many adversaries. In this attack, a Windows username is paired with the hashed value of a Windows account password. Let's take a deeper look. … [Read more...]

How to Create and Configure an AWS VPC with Python

Amazon Web Services enables you to create a custom defined virtual network also know as Amazon VPC or Amazon Virtual Private Cloud, which, just like any traditional network in a data center, is highly scalable and easily configurable using programming languages like Python. In this article we will demonstrate how to automate creating an AWS VPC and configure a custom virtual network. … [Read more...]

How to Automate AWS S3 Static Websites Using Python

Amazon Web Services offers a very popular object storage service known as Amazon S3 (Simple Storage Service) that enables you to store data, files, images and even videos in highly available containers called ‘buckets’ which are also easy to access endpoints using any popular programming language. In combination of AWS S3 and with other AWS services developers can build scalable and durable … [Read more...]

Podcast: What it’s like to Start Your Own IT Website

A lot of people dream of leaving their day job and starting their own business, but for many, the risk, and the leap of faith required to take it, is simply to great of an unknown. For the 40th edition of Defrag This, we spoke to someone who's taken that risk to launch his own IT e-learning platform.  … [Read more...]

Safeguarding Your Network From Insider Threats

"The call is coming from inside the house...” This line from 1979’s When a Stranger Calls terrorized audiences by introducing the notion that the things we should be most fearful of may be in the spaces we feel most safe. This idea neatly translates neatly to the enterprise arena; security teams often are on the lookout for outside threats including malware, phishing scams, and ransomware attacks, … [Read more...]