We are the experts in Active Directory, Entra ID, and Identity security. Find out more about our services at https://teapawt.org/t.co/3kWA6f7dh1.
Washington, DC
Joined February 2016
- Tweets1.6K
- Following132
- Followers5.1K
- Likes554
Trimarc retweeted
Excited to announce that @TrimarcSecurity and @TrustedSec are joining forces.
Happy to welcome over the amazing #Trimarc folks led by @PyroTek3 over to the #TrustedSec team and further expand our capabilities at TS.
prweb.com/releases/trimarc-j…
Trimarc retweeted
❌ Admins, please block Device Code Flows (DCF) in your tenant today!!
In the post below I share how device code phishing works, the CA policy to create and finally show how it get's blocked with the policy.
🧵👇
The ability to block Device Code Flow just became available in Microsoft Entra ID Conditional Access.
Here's a quick walkthrough of how attackers use device code flow to get access to your tenant and what you can do to protect yourself.
ALT Attn M365 admins & security teams Create this CA policy NOW and protect your users from Device Code Flow phishing & social engineering attacks!
Trimarc retweeted
Behind every major hack is:
A complex technical explanation
A human story
And usually a really dumb mistake
I tell all three.
Trimarc retweeted
Grab the fresh release of Locksmith to help secure your Active Directory Certificate Services in 2025!
This free tool now includes risk ratings and other improvements.
Install-Module Locksmith -Scope CurrentUser
github.com/TrimarcJake/Locks…
#ActiveDirectory #ADCS #PKI #PowerShell
Trimarc retweeted
@PyroTek3 discussing free AD security tools from the @TrimarcSecurity team. Full episode here; youtu.be/-5jWcZ2UNMk
Trimarc retweeted
Make sure you stop by the @TrimarcSecurity ISV (Active Directory Hacking) today at @hthackers Hackers Teaching Hackers. There might even be a second CTF flag there if you know where to look.....
Trimarc retweeted
Not only will @dakacki and I have a not-to-be-missed talk...
@TrimarcSecurity will donate $5 for each viewer to @GirlsWhoHack !
Let's empty their bank accounts!
And be sure to catch our Happy Hour livestream this Friday at 11 am PT / 2 pm ET, because we're featuring the awesomely effervescent @BiaSciLab! Join us this Friday at twitch.tv/TrimarcSecurity
Trimarc retweeted
![Ray [REDACTED] (@RayRedacted) profile picture](https://pbs.twimg.com/profile_images/2114716558127665152/oyqX8byl_400x400.jpg)
All kidding aside, I’m going to be on this broadcast for approximately an hour this Friday.
Is there anything that you, the potential viewer & listener, would like me to cover? If you would prefer to answer privately my DM’s are open*
Thx,
Ray
*But Signal is way better
We have a special guest for this Friday's Happy Hour livestream...
@RayRedacted ! 🤘
Ray will be joining us to chat about, well -- whatever the heck he wants to talk about!
It's Ray[REDACTED] FFS. The actual hosts are incidental eye candy at best this week.
Catch the livestream this Friday (October 25) at 11 am PT / 2 pm ET on Twitch or YouTube.
twitch.tv/TrimarcSecurity
youtube.com/@trimarcsecurity
Trimarc retweeted
New project: FlameScale OS. An operating system aimed at Active Directory/Windows security research. I will be adding more functionality weekly on Sundays. Get your hands dirty with it at the @TrimarcISV (AD Hacking Village) at @hthackers Nov 13th-15th.
github.com/dfirdeferred/Flam…
Trimarc retweeted
I created a wrapper/menu to make downloading and opening all of the @TrimarcSecurity tools on github easier and in one place. Just run the script and select which tool you want to download/open.
github.com/dfirdeferred/Trim…
#trimarc #activedirectory
Trimarc retweeted
Locksmith 2024.10 is out with quality updates and improved detections for ESC8 and ESC3 condition 2. Have you double-checked your Active Directory Certificate Services templates yet? #ADCS #PKI #WindowsServer #ActiveDirectory #PowerShell
github.com/TrimarcJake/Locks…
ALT Locksmith logo. Got ADCS? Invoke-Locksmith
Trimarc retweeted
Slides from my @MCTTP_Con talk "A Decade of Active Directory Attacks - What We've Learned & What's Next" are now posted: trimarc.co/SeanTalkMCTTP2024
Trimarc retweeted
Happy Hour is back! Our weekly livestream of tips, tricks & occasional hot takes. Today we're digging into this month's Dragon's Breath newsletter, affectionately dubbed "the Augustember edition" 🍂
Join us at 11 am PT / 2 pm ET
hubs.li/Q02NVVT-0
hubs.li/Q02NVM7f0
Trimarc retweeted
Thank you to @techbrandon from @TrimarcSecurity for joining us today and sharing your knowledge from your talks at @defcon!
We appreciate you taking the time to share with The Wednesday Offensive group!
Trimarc retweeted
This is a finding in about 1/3 of Trimarc Azure AD/Entra ID security assessments.
Azure AD Seamless Single Sign-On is problematic since there's a static key (computer account password) that never changes.
Secure Azure AD (Entra) Connect:
hub.trimarcsecurity.com/post…
If you haven’t moved away from seamless SSO in Entra ID connect, this blog is gold to automating secrets rotation on the Kerberos decryption key. This account should be handled like the krbtgt account. Not rotating them in your environment is gross 🤢
cloudcoffee.ch/microsoft-azu…