Identity and Access Security
Windows LAPS Deployment and Security Guide
Windows LAPS deployment security covers account choice, directory preparation, encryption, retrieval rights, rotation, auditing, rollout, and recovery.
Category
Identity and Access Security
Authentication, federation, authorization, sessions, workload identity, and access governance.
7 resources
Resources in this category
Browse all resources
Identity and Access Security
Password Spraying: Detection and Response Guide
Password spraying detection correlates authentication failures across accounts, protocols, sources, time windows, MFA outcomes, and successful access.
Identity and Access Security
Malicious Email Forwarding Rules: Detection and Response
Malicious email forwarding rule detection correlates rule changes, destinations, sign-ins, message traces, mailbox access, audit evidence, and persistence.
Identity and Access Security
Kerberoasting Detection and Response Guide
Kerberoasting detection and response uses TGS request context, encryption types, account baselines, service-account hardening, and credential recovery.
Identity and Access Security
MFA Fatigue Attacks: Detection and Response
MFA fatigue attack detection correlates repeated prompts, password attempts, user denials, approval context, session creation, and downstream account use.
Identity and Access Security
Golden SAML: Detection, Containment, and Recovery
Golden SAML detection correlates federated sign-ins with assertion claims, signing keys, identity-provider issuance, MFA context, and relying-party use.
Identity and Access Security
SCIM Token Compromise: Detection and Response
SCIM token compromise detection correlates provisioning configuration, client authentication, user and group mutations, and downstream access.