PowerShell JEA: Restricting Remote Admin Access
It was 11 PM on a Tuesday when the SIEM flagged a credential harvesting alert on a domain controller. Someone had launched Mimikatz from a PowerShell remoting session…
13 min read
DevSecOps Best Practices: A Pipeline Walkthrough
During an incident response engagement last year, we pulled the deployment logs for a mid-sized financial services company and found something that should have stopped…
8 min read