Active Directory Certificate Services Abuse: The Hidden Path to Domain CompromiseWhy This Matters Most defenders hunt for credential theft, Kerberoasting, or suspicious PowerShell. But what if an attacker never steals a password at all? In many Active Directory environments, miscoMay 15 · 6 min readrickytipler.hashnode.dev
LetsDefend Detection Engineering Path Week 2Day 1 - Course: Network Design and Security Products Lesson - Network Topology Design After a refreshing vacation last week, I am excited to dive back into the detection engineering course of network design. When designing a secure network infrastru...Jul 1, 2024 · 6 min readrickytipler.hashnode.dev
LetsDefend Detection Engineering PathThis week I took it upon myself to start this detection engineering path with Let's Defend to sharpen my skills in threat detection tools, incident response, and advanced log analysis. I would love to finish this by June, but the ultimate goal is to ...Jun 11, 2024 · 7 min readrickytipler.hashnode.dev
Enhancing Web Server Security with ModSecurity and OWASP CRS: A Step-by-Step GuideIntroduction: Web servers play a crucial role in serving web applications and content, but they are also prime targets for cyberattacks. To ensure secure operation and protect sensitive data, it is essential to configure web servers properly. This ar...Jun 13, 2023 · 6 min readrickytipler.hashnode.dev
