CSandkerinSSE BlogAttacking Microsoft Configuration Manager (SCCM/MECM)The Microsoft Configuration Manager (ConfigMgr) is an on-premise software management solution to deploy, configure and update managed…19 min read·May 17, 2023--1--1
CSandkerinSSE BlogOffphish — Phishing revisited in 2023What is the state of the art with phishing in 2023? What techniques do exist, which do still work and what is know-how worth revisiting?22 min read·Feb 9, 2023----
CSandkerinSSE BlogActive Directory Spotlight: Windows Event Forwarding & Windows Event CollectorWindows Event Forwarding has been around for 20 years and has since then been underestimated in its role to make use of log events for…17 min read·Jul 27, 2022----
CSandkerinSSE BlogAdvisory and Exploitation: The MELAG FTP ServerDuring an engagement in early 2021 we stumbled across an FTP server with a banner that we’ve never seen before…12 min read·May 5, 2022----
CSandkerinSSE BlogActive Directory Spotlight: Trusts — Part 2. Operational GuidanceIn the first part of this Active Directory (AD) spotlight I introduced the mechanics of Active Directory Trusts and highlighted what a…18 min read·Aug 10, 2021----
CSandkerinSSE BlogActive Directory Spotlight: Trusts — Part 1. The MechanicsThis spotlight is intended to shed some light on Active Directory Trusts, the value they bring, the risk they can contain and how to…18 min read·Aug 10, 2021----