Session security, token protection, continuous access evaluation, and measuring what users ACTUALLY sign in with MFA to Passkeys in Microsoft Entra ID series · Part... 2026-10-29 10:0:0 | 阅读: 3 | 收藏 | Shell is Only the Beginning - www.darkoperator.com microsoft measure revoke

Passkey enrollment and account recovery, the new weak point Registration campaigns, Temporary Access Pas... 2026-10-26 10:0:0 | 阅读: 30 | 收藏 | Shell is Only the Beginning - www.darkoperator.com tap microsoft security passkey

Enabling Passkeys Is Not the Same as Enforcing Them Authentication strengths, Conditional Access design, and closing the weak-fallback and devic... 2026-10-22 10:0:0 | 阅读: 19 | 收藏 | Shell is Only the Beginning - www.darkoperator.com strength microsoft phishing resistant

Passkeys Explained, and Choosing the Right Model How WebAuthn defeats phishing, and how to ma... 2026-10-19 10:0:0 | 阅读: 21 | 收藏 | Shell is Only the Beginning - www.darkoperator.com passkey microsoft passkeys synced attestation

MFA Passed. The Attacker Still Got In. MFA to Passkeys in Microsoft Entra ID series... 2026-10-5 12:0:0 | 阅读: 23 | 收藏 | Shell is Only the Beginning - www.darkoperator.com microsoft phishing passkeys resistant

Tracking WMI Activity with PSGumshoe WMI (Windows Management Instrumentation) is the M... 2022-3-28 01:18:1 | 阅读: 31 | 收藏 | www.darkoperator.com sddc01 ngroup acmelabs eventid

Sysmon for Linux PowerShell Module Sysmon has been a great tool to enhance logging in Windows for many year allowing well organized tea... 2022-3-21 18:0:0 | 阅读: 24 | 收藏 | www.darkoperator.com syslog sysmon sysmonlinux processguid

Beyond the Technical - Advise for those starting in Infosec One question I get on a regular basis is “I want to start a career in infosec where do I start?” and... 2020-12-28 21:00:00 | 阅读: 122 | 收藏 | www.darkoperator.com goals security invest collateral investment

Operational Thoughts in Trying Times This post is as much as a reminder to myself of where I should focus on the multiple jobs I have and... 2020-05-06 19:00:31 | 阅读: 64 | 收藏 | www.darkoperator.com goals engagement planning brent ground

Getting DNS Client Cached Entries with CIM/WMI The DNS cache maintains a database of recent DNS res... 2020-02-03 19:00:00 | 阅读: 75 | 收藏 | www.darkoperator.com cimsession acmelabs wql cim

Being Grateful at Heilderburg Recently while in the bar of the Crown Plaza in Heidelberg for the Troopers conference I became awar... 2019-03-25 10:06:52 | 阅读: 64 | 收藏 | www.darkoperator.com passion grateful him admire friend

Operating Offensively Against Sysmon Sysmon is a tool written by Mark Russinovich that I... 2018-10-08 19:00:00 | 阅读: 77 | 收藏 | www.darkoperator.com sysmon software windows

Rebuilding My Playbook .. Knowledge Base I find myself in the situation where I lost my personal playbook by user error. I accidentally delet... 2017-12-13 20:00:00 | 阅读: 60 | 收藏 | www.darkoperator.com playbook rebuild gitlab synced choosing

Operational Look at Sysinternals Sysmon 6.20 Update When getting shell is only... 2017-11-27 20:00:00 | 阅读: 68 | 收藏 | www.darkoperator.com sysmon windows

Some Comments and Thoughts on Tradecraft I have been writing a series on the new Windows Defender Exploit Guard features on Attack Surface Re... 2017-11-20 20:00:00 | 阅读: 65 | 收藏 | www.darkoperator.com network skill attacker agents enemy

Windows Defender Exploit Guard ASR Rules for Office On this blog post I continue looking at the ASR rule... 2017-11-14 20:00:00 | 阅读: 76 | 收藏 | www.darkoperator.com byval longptr dim microsoft

Windows Defender Exploit Guard ASR Obfuscated Script Rule When getting shell is only... 2017-11-08 21:00:00 | 阅读: 84 | 收藏 | www.darkoperator.com clng powershell asr microsoft obj0

Windows Defender Exploit Guard ASR VBScript/JS Rule Microsoft has been adding to Windows 10 the features... 2017-11-07 21:00:00 | 阅读: 87 | 收藏 | www.darkoperator.com windows powershell xmlhttp microsoft

Switching Ruby Version in RVM for Metasploit Development When getting shell is only... 2017-10-25 21:00:00 | 阅读: 79 | 收藏 | www.darkoperator.com rvm gemset migrate gemsets ri

Basics of The Metasploit Framework API - IRB Setup Those of you who have taken my "Automating Metasploi... 2017-10-23 21:00:00 | 阅读: 78 | 收藏 | www.darkoperator.com irb gem wirble gems gemfile