Pen Testing.

Kerberoasting Under Fire: How Group Managed Service Accounts Can Save the Day

From Shadows to Signals: Hunting Pass-the-Hash Attacks

NTLM is (finally) Dying

From File Deletion to Domination: Exploiting Cisco’s VPN Clients for Privilege Escalation

OneRuleToRuleThemStill: New and Improved

Detecting Lateral Movement via WinRM Using KQL

Analysing CVE-2018-13417 for files, hashes and shells