We Didn’t Get Domain Admin

Domain Admin isn’t guaranteed on a pentest. It isn’t always the goal, either.

Active Directory is finally dead

Active Directory has survived basically every technology trend that was supposed to make it irrelevant, until now?

Find these hidden Active Directory attack paths

4 attack paths to look for in your environment and how to find them.

What “doing basic security well” means

Doing “basic” security well has never been more important. Here's how to do it right.

7 ways to harden Active Directory

How to actually make Active Directory MORE defensible....

This attack path should not be possible

Mitigate cyber attacks with this one tool

If your users can download or install software, then they can get infected with malware.

Eliminating Active Directory attack paths

Here's my recommended (& practical) recommendations for eliminating attack paths in Active Directory, in realistic time frames.

Assume one employee gets hacked. Now what?

After 150+ pentests and thousands of hours inside internal networks, I’ve realized that after an employee or endpoint is compromised, post-compromise risk comes down to three questions.

The best ways harden Active Directory

Most people get Active Directory hardening wrong. They think they need to add security controls and tools. Do this instead...

Use these tools to secure Active Directory

Tools are a means to an end. If you only have a hammer, everything looks like a nail. Pick the right tool for the job.

Why EDR isn't enough anymore

EDR is one of the best investments you can make. But after performing thousands of hours of internal pentests I’ve come to realize, it’s just not enough.

3 App Control Rules To Never Break

Application control is a powerful technique...but only if you use it wisely. A single weak or misconfigured rule can open the door for attackers.

Windows Misconfigs Keeping Hackers Employed in 2026

Ransomware Threat Actors are very good at the basics, and this shows against companies that aren’t.

The fastest way to find your detection gaps

I’ve been doing internal network security, (traditional Active Directory environments), for 15 years. The difference between a mature security program and those who get breached, is how well they detect threats.

How to identify attack paths in Active Directory without BloodHound

I’ved logged more than 1,000 hours of internal pentesting in 2025 alone. I promise you, attack paths are everywhere. And attackers are counting on you not caring enough to find and fix them.

Hackers hate this...

If you’re serious about detecting threat actors in your network BEFORE they do real harm, you need this.

Mythos hacked the NSA in a few hours, so what?

"When the head of the NSA and Cyber Command came and said, this tool..."

Security Alerts No One Sets Up (But Should)

No alerts does not always mean your environment is safe.

Why Active Directory Attack Paths Matter

Defense is a state of invincibility achieved through strategy.

The Active Directory permissions no one checks

Attackers love shortcuts. Hidden insecure permissions are their express lane to Domain Admin.

Avoid this cyber leadership trap

Here’s what I would do instead.

How insecurely installed 3rd-party software can hurt you

Attackers thrive on easy targets, don’t be one.

MFA on Servers is Security Theatre

Do this to mitigate lateral movement

How to Harden Service Accounts

Three ways to prevent service account compromise.