Written by Joshua Prager and Emily Leidy

Ghostwriter v3.1 is now available! This release introduces several new features along with a host of minor improvements.

This is a series of blog posts designed to give you a ground-up start to defending a specific technology from potential attackers.

Your new best friend: Introducing BloodHound Community Edition!

This post was written by Will Schroeder and Lee Christensen.

With chromium-based browsers being the new favorite, learn how to combine multiple commands supported by CDP to save time and increase efficiency in a red team engagement.

How Certificate Based Authentication works, passwordless persistence with CBA, passwordless privilege escalation, prevention, detection, and more.

Your new best friend: Introducing BloodHound Community Edition!

In this blog post, we’ll answer the question, “If I compromise a Read-Only Domain Controller, can I compromise the domain?” or, “Do RODCs belong in Tier Zero?”

Introduction

Managed Identities eliminate huge amounts of risk, but they do create new types of risks that Azure admins must be aware of...

Your new best friend: Introducing BloodHound Community Edition!

In this post, we examine BOFHound-compatible BOFs and usage examples that allow an operator to take a manual and targeted approach to attack path mapping.

Contextualizing Tier Zero TL;DR An accurately defined Tier Zero provides an accurate depiction of Attack Path Findings in your BHE tenant. Different principals (groups, GPOs, OUs, etc.) have different implications when Tier Zero is defined — understanding…