TL;DR Walkthrough of Introduction to Cryptography, part of TryHackMe’s new Security Engineer pathway. THM Walkthroughs: Attacktive Directory (part of the Pentest+ Pathway) Credential Harvesting (part of the Red Team Pathway) AV Evasion: Shellcode (part of the Red Team Pathway) Anthem (general Practice VM) Living off the Land (part of the…

TL;DR TryHackMe is running a promotion for the new Security Engineer pathway! Refer a friend, complete rooms, write one of these walkthroughs, etc for a chance to win stuff! Also, here’s a walkthrough of the AD Hardening room. THM Walkthroughs: Attacktive Directory (part of the Pentest+ Pathway) Credential Harvesting (part…

TL;DR walkthrough of one way to complete the osquery room on TryHackMe, part of the Cyber Defense pathway. THM Walkthroughs: Attacktive Directory (part of the Pentest+ Pathway) Credential Harvesting (part of the Red Team Pathway) AV Evasion: Shellcode (part of the Red Team Pathway) Anthem (general Practice VM) Living off…

TL;DR Walkthrough of the TryHackMe Sysmon room, part of the Cyber Defense pathway. THM Walkthroughs: Attacktive Directory (part of the Pentest+ Pathway) Credential Harvesting (part of the Red Team Pathway) AV Evasion: Shellcode (part of the Red Team Pathway) Anthem (general Practice VM) Living off the Land (part of the…

TL;DR Walkthrough of how we completed the TryHackMe Windows Event Logs room, part of the Cyber Defense pathway. THM Walkthroughs: Attacktive Directory (part of the Pentest+ Pathway) Credential Harvesting (part of the Red Team Pathway) AV Evasion: Shellcode (part of the Red Team Pathway) Anthem (general Practice VM) Living off…

TL;DR How to complete the TryHackMe ZeroLogon room without having to tweak or even use the provided PoC code. This room is part of the Cyber Defense pathway. THM Walkthroughs: Attacktive Directory (part of the Pentest+ Pathway) Credential Harvesting (part of the Red Team Pathway) AV Evasion: Shellcode (part of…

TL;DR cheatsheet for setting SACLs, taking the action, how to query the logs to show relevant info, and RE Event IDs. Welcome to Part IX of our Cheatsheet Series! Part I: Mimikatz cheatsheet Part II: Set-Acl cheatsheet Part III: Get-Acl cheatsheet Part IV: Enumerating AD cheatsheet Part V: Windows reverse…

TL;DR how to get Windows Event Forwarding working, how to query & tweak SACLs, and how to query the logs on the Windows Event Collector. Welcome to Part XI of our Back to the Basics Series! Part I: NTDS.dit vs SAM Part II: Ownership Matters Part III: Recovering from a…

TL;DR We worked up a pair of tools called RedTeam & AbuseTool that enumerate rights in AD and then abuse them. The tools are here. Please leave any remarks or suggestions in the comments! We are open to recommendations, criticism, etc! Welcome to the annexes of our Auditing AD Series! …