CptSC

[CptSC @CptSC]

@HuntressLabs True, for one of the exploits in question. What about Agent2Shell?

[CptSC @CptSC]

@_dirkjan @olafhartong That's odd i setup a new dev tenant just 2 weeks ago with no issues

[CptSC @CptSC]

@NathanMcNulty But dev tenants are still a thing, just not for the general public. But any partner in reality is eligible and anyone with a visual studio subscription

[CptSC @CptSC]

@NathanMcNulty Yup, thought it was a bad joke when looking over the advisory

[CptSC @CptSC]

@IAMERICAbooted It's always the FW fault everyone knows that, even when its DNS

[CptSC @CptSC]

@IAMERICAbooted The other side of that tho is the people who think they can do the work and just f it up and it ends up for the rest of us to clean up. The middle road is not always so easy to find especially in large enterprises

[CptSC @CptSC]

@IAMERICAbooted I can't even manage to get a response most times from them

[CptSC @CptSC]

@jarwidmark @merill I bet this hardly scratches the surface

[CptSC @CptSC]

@FrillePelle Är det då i samband med start av fas 2, eller finns andra händelser som skulle utlösa utbetalningar?

[CptSC @CptSC]

@RealDonKeith Some tried to do something when faced with it:
https://t.co/cTtLdZMYV9

[CptSC @CptSC]

@DebugPrivilege Salmon?

[CptSC @CptSC]

@awakecoding @NathanMcNulty Yes a daily unique pin code can be used for those cases

[CptSC @CptSC]

@awakecoding @NathanMcNulty It can't be self hosted, it's a full SaaS offering

[CptSC @CptSC]

@NathanMcNulty @awakecoding Yes mandatory sign-up but free tier up to 25 devices

[CptSC @CptSC]

@AdamGrossTX Automatic approvals and automatic deployment the weekend following patch tuesday with test rings the days prior.

[CptSC @CptSC]

@acjuelich @DecryptedTech @IAMERICAbooted Why be, we can't know everything 🙂.
You would upgrade the schema before promoting the first DC of a new OS version.

[CptSC @CptSC]

@acjuelich @DecryptedTech @IAMERICAbooted DFL/FFL are separate things. The schema is update during the adprep

[CptSC @CptSC]

@IAMERICAbooted @acjuelich 90 I think. But please double check me on this

[CptSC @CptSC]

@IAMERICAbooted Get-ADObject (Get-ADRootDSE).schemaNamingContext -Property objectVersion |
Select-Object -ExpandProperty objectVersion

88 and below should mean that badsuccesor is no issue. Permissions over msDS-KeyCredentialLink would still be problematic. SpecterOps has a write up I think