CloudKatha

CloudKatha is a #cloudcomputing blog which will help you design,develop and deploy highly available,scalable and cost effective applications into #AWS cloud.

[Microsoft Threat Intelligence @MsftSecIntel]

The key to securing Active Directory is being proactive about hardening policy, remediating underlying weaknesses and applying the principle of least privilege to the environment before a cyberattack. By reducing the paths from standard non-privileged users to privileged users, organizations give themselves the best chance of preventing Active Directory compromise.

Weaknesses and misconfigurations within environments could allow threat actors to target Active Directory to gain access to privileged credentials and control of critical data and systems. These misconfigurations in Active Directory could often be an artifact of legacy services or other technical debt in corporate networks and can remain unknown to defenders until they are leveraged in a cyberattack.

This month marks the 25th anniversary of Windows 2000, and many organizations have instances of Active Directory that are nearly that old. That is a lot of time for privileged access to accrue in the form of group memberships, service accounts, Access Control Lists (ACLs), security policies and other sensitive settings. Thus, it is important for organizations to regularly assess their environment and pursue a least privileged posture by revoking any elevated access that is not required. Additionally, taking steps such as disabling legacy authentication and communication protocols will raise the price of entry and deter attacker looking for an easy target.

Active Directory compromise often starts with the compromise of a regular non-privileged user. Threat actors then use this account to perform reconnaissance against Active Directory, to find the shortest path to a Domain Admin or equivalent account. Some threat actors use open-source tools such ADRecon and BloodHound, or even built-in commands to enumerate the directory such as 'net user' or 'net group'. Nation-state actors and cybercriminals such as Peach Sandstorm, Octo Tempest, and others target weaknesses in security policy and other misconfigurations in Active Directory to obtain privileged credentials to achieve their goal, whether espionage, data theft, or even ransomware.

Microsoft expert @reprise_99 shared key learnings on securing Active Directory based on Microsoft Incident Response engagements here: https://t.co/YHMHeHcpVL

Microsoft Unified Support customers also have access to on-demand assessment tools for Active Directory that provide an analysis of critical workloads and predict and prescribe helpful next steps to improve and optimize the health of their environment. https://t.co/QNOrsD8G4l

Learn more about how to better secure Active Directory in this blog series by Jerry Devore about Active Directory hardening: https://t.co/526Z6TjbC0

[CloudKatha @cloudkatha]

What do you think is the way to become a good AWS developer?

Here is what I think -

https://t.co/B70bChoGqs
#AWSCommunity #100DaysOfCode #WomenWhoCode #100DaysOfCloud

[CloudKatha @cloudkatha]

What do you think is the way to become a good AWS developer?

Here is what I think -

https://t.co/B70bChoGqs
#AWSCommunity #100DaysOfCode #WomenWhoCode #100DaysOfCloud

[CloudKatha @cloudkatha]

https://t.co/gXut5me9D6

.
.
#cloudkatha #AWS #IAM #100DaysOfCode #AWSCommunity #100DaysOfCloud #WomenWhoCode #WomenInStem

[CloudKatha @cloudkatha]

How to Connect to EC2 Instance using Putty Quickly
.
#CloudKatha #AWS #awscloud
#EC2 #AWSCommunity #DEVCommunity #CloudComputing
#AWSblog #WomenInSTEM
#Womenintech #WomenWhoCode

https://t.co/Z7uZyRFbSN

[CloudKatha @cloudkatha]

https://t.co/gXut5me9D6

.
.
#cloudkatha #AWS #IAM #100DaysOfCode #AWSCommunity #100DaysOfCloud #WomenWhoCode #WomenInStem

[CloudKatha @cloudkatha]

How to Connect to EC2 Instance using Putty Quickly
.
#CloudKatha #AWS #awscloud
#EC2 #AWSCommunity #DEVCommunity #CloudComputing
#AWSblog #WomenInSTEM
#Womenintech #WomenWhoCode

https://t.co/Z7uZyRFbSN

[CloudKatha @cloudkatha]

Boto3 Resource vs Client – Do You Know the Difference?

https://t.co/OdVEYU5Fzm
.
.
#CloudKatha #100DaysOfCode #AWS #awscommunity #DEVCommunity #100DaysOfCloud #CloudComputing #WomenWhoCode #WomenInSTEM #WomenInTech #awsblog #Boto3 #awscloud

[CloudKatha @cloudkatha]

How to Install Java 8 on AWS Cloud9 IDE
https://t.co/sNoUYYYvn1
.
.
#CloudKatha #awscloud #CloudComputing #awsblog #cloud9 #Java8 #awscommunity #aws

[CloudKatha @cloudkatha]

How to Create S3 Bucket Policy using CloudFormation

https://t.co/IFi7nEaPuJ
.
#cloudkatha #awsblog #aws #awscloud #CloudComputing #S3 #CloudFormation

[CloudKatha @cloudkatha]

Automated React App Deployment from CodeCommit to S3 using CodePipeline

https://t.co/ZnJcRxWScq
.
.
#CloudKatha #aws #awscloud #CloudComputing #react #awsblog #S3 #codepipeline #codecommit

[CloudKatha @cloudkatha]

Automated React App Deployment from CodeCommit to S3 using CodePipeline

https://t.co/ZnJcRxWScq
.
.
#CloudKatha #aws #awscloud #CloudComputing #react #awsblog #S3 #codepipeline #codecommit

[CloudKatha @cloudkatha]

How to Create S3 Bucket Policy using CloudFormation

https://t.co/IFi7nEaPuJ
.
#cloudkatha #awsblog #aws #awscloud #CloudComputing #S3 #CloudFormation

[CloudKatha @cloudkatha]

How to Install Java 8 on AWS Cloud9 IDE
https://t.co/sNoUYYYvn1
.
.
#CloudKatha #awscloud #CloudComputing #awsblog #cloud9 #Java8 #awscommunity #aws

[CloudKatha @cloudkatha]

How to Connect to AWS RDS using MySQL Workbench

https://t.co/iRlcgNl1FF
.
.
#CloudKatha #AWSCommunity #DEVCommunity #awscloud #CloudComputing #awsblog #rds #mysql #workbench

[CloudKatha @cloudkatha]

Enterprise Security Operation Center (SOC) – things you should know

https://t.co/JR0TxgEf6J
.
.
#cloudkatha #SOC #EnterpriseSOC #CyberSecurity #CloudComputing

[CloudKatha @cloudkatha]

How to Deploy Spring Boot Application on AWS EC2

https://t.co/bGUVSuCJl2.
.
#cloudkatha #awscloud #awscommunity #DEVCommunity #EC2 #SpringBoot #awsblog #CloudComputing #womeninSTEM #Womenintech #WomenWhoCode

[DynamoDB @dynamodb]

🚀 We’re excited to announce the launch of DynamoDB incremental export to S3. You can now export changed data from your DynamoDB tables, making it easier to keep your S3 data lakes updated regularly. 👉 https://t.co/u9YNmZ096a

[CloudKatha @cloudkatha]

How to Deploy Spring Boot Application on AWS EC2

https://t.co/bGUVSuCJl2.
.
#cloudkatha #awscloud #awscommunity #DEVCommunity #EC2 #SpringBoot #awsblog #CloudComputing #womeninSTEM #Womenintech #WomenWhoCode