Holger Zimmermann

Senior Solution Architect | Breach Preparedness & Response Services @ Semperis

[Holger Zimmermann @HerrHoZi]

As a reminder, here is my article

AS2Go | How one certificate template misconfiguration (ESC1) can lead to complete Active Directory (AD) forest compromise – Herr HoZi

[Andrea P @decoder_it]

Feeling the frustration with https://t.co/CG442HKRB9 lacking refresh token exposure? Fear not! A few (code) hacks can make it work like a charm

[Holger Zimmermann @HerrHoZi]

#ADSecurity: Take some time and learn how cyberattackers can exploit primary group IDs!

#TeamSemperis #ActiveDirectory https://t.co/AXrLsxHrvL

[Holger Zimmermann @HerrHoZi]

#ADSecurity: My opinion, try to avoid using #hybrid #AAD Join. One reason is that Active Directory (#AD) and on-premises Exchange are big targets with many vulnerabilities. https://t.co/lDpKvYEaCd

[Holger Zimmermann @HerrHoZi]

#Security: Grab a Coffee and follows Gil Kirkpatrick on-demand #webinar. https://t.co/tVH1M7L269

[Holger Zimmermann @HerrHoZi]

#AD: Come and join Guido Grillenmeier Webinar at SASIG Events next Wednesday. https://t.co/j7vIrX6DdW

[Holger Zimmermann @HerrHoZi]

#MDI: Honeytoken tagging can be a fantastic way to leverage Microsoft Defender for Identities insights into authentication to further help you defend your enterprise.

Learn the different methods of placing and creating enticing honeytokens. https://t.co/CH2anv7Vqs

[Holger Zimmermann @HerrHoZi]

#MDI: Check out what the remarkable advantages of this convergence brings. https://t.co/pALXcJcloK

[Holger Zimmermann @HerrHoZi]

#Reportly: Take some time to play with Sapir Federovsky cool tool.

Reportly will help blue teams during a cloud incident. The researcher has just to enter the suspicious user and get detailed report with:

- Information about the user
- Actions taken by…https://t.co/gSmlaY2THq

[Holger Zimmermann @HerrHoZi]

#ADFR = Stress-free AD backup and faster AD disaster recovery!

#TeamSemperis https://t.co/wWRkIwVXpz

[Holger Zimmermann @HerrHoZi]

#ADSecurity: #PurpleKnight is free, but the results are priceless. Take some time to run the assessment in your environment.

#TeamSemperis https://t.co/1jUR6YdAYp

[Holger Zimmermann @HerrHoZi]

#ADSecurity: In our Active Directory Security Assessments (#ADSA) we often find insecure User Rights Assignments. A successful abuse by an attacker allows, among other things, by using publicly available tools to extract logon cred…https://t.co/Xz3GYaFmG9 https://t.co/RBZiv4ieTv

[Holger Zimmermann @HerrHoZi]

#PurpleKnight: Grap a Coffee and listen to Guido Grillenmeier. https://t.co/Qajh9um0aN

[Holger Zimmermann @HerrHoZi]

#AD: Now’s the Time to Rethink Active Directory Security - Take some time to enjoy the Podcast. https://t.co/uBeL0rwTNr

[Holger Zimmermann @HerrHoZi]

#AD: Another good AD Security 101 series blog https://t.co/QSKzwUEjHf

[Holger Zimmermann @HerrHoZi]

#PurpleKnight - Take some time to analyse your AD Environment with PK 3.0 https://t.co/Q7CGgGVuSe

[Holger Zimmermann @HerrHoZi]

#AD: Come and join us on April 20th and learn why your Active Directory is central https://t.co/7V3C7AqE1m

[Holger Zimmermann @HerrHoZi]

#TeamSemperis - come and join us to be a part of a #ForceforGood https://t.co/cxXcFo5g2X

[Holger Zimmermann @HerrHoZi]

#AD: Learn how Semperis helps Business Recovery from cyber Attacks and keep critical operations in track. Guido Grillenmeier wrote a great blog.

#cyber #adfr #ransomeware https://t.co/c7PVo8eQoF

[Holger Zimmermann @HerrHoZi]

#ForestDruid: Closes the paths attackers use to target Tier 0 assets. Learn more about Forest Druid from my colleague @RHStam

#teamsemperis #tier0 https://t.co/WSgkW7XlQh