))
E25 - Clean Up Your Act: Boosting Security Through Account Hygiene
Manage episode 446128078 series 3555974
محتوای ارائه شده توسط Anthony Kent & Tanner Greer, Anthony Kent, and Tanner Greer. تمام محتوای پادکست شامل قسمت‌ها، گرافیک‌ها و توضیحات پادکست مستقیماً توسط Anthony Kent & Tanner Greer, Anthony Kent, and Tanner Greer یا شریک پلتفرم پادکست آن‌ها آپلود و ارائه می‌شوند. اگر فکر می‌کنید شخصی بدون اجازه شما از اثر دارای حق نسخه‌برداری شما استفاده می‌کند، می‌توانید روندی که در اینجا شرح داده شده است را دنبال کنید.https://fa.player.fm/legal
In this comprehensive episode, we explore critical aspects of managing IT security, focusing on Active Directory audits, password hygiene, and privilege management. We share practical strategies for conducting thorough security audits, managing group policies, and ensuring effective password practices using tools like CrowdStrike and Microsoft Azure.
Emphasis is placed on minimizing over-privileged accounts, leveraging secure remote access tools, and implementing Multi-Factor Authentication (MFA) to enhance security. The discussion extends to the importance of dynamic employee groups, regular auditing of both AD and non-AD integrated systems, and the necessity of maintaining detailed documentation for enhanced cybersecurity. Real-life examples and practical advice underscore the importance of curiosity and constant improvement in IT security practices, with regular reviews and a proactive approach to identifying and mitigating risks.
Microsoft Entra Password Protection - Microsoft Entra ID | Microsoft Learn https://learn.microsoft.com/en-us/entra/identity/authentication/concept-password-ban-bad-on-premises
Group Policy: Automatically Delete User Profiles Older Than Certain Number of Days Win 10 not working. - Microsoft Q&A https://learn.microsoft.com/en-us/answers/questions/441800/group-policy-automatically-delete-user-profiles-ol
00:00 Introduction and Episode Overview
00:04 Listener's Request: Active Directory Audit
02:14 Account Hygiene Tips and Auditing Processes
02:36 Handling Stale Accounts and Group Policies
04:48 Group Memberships and Elevated Access
09:35 Password Management and Security
16:41 Auditing GPOs and Password Expirations
19:56 Dynamic Groups and Documentation
29:34 File Sharing and Ransomware Stories
31:38 The Dangers of Open Shares
32:37 The Importance of Regular Audits
32:55 Onboarding and Job Role Audits
33:49 Offboarding and Permission Management
34:48 Curiosity in Cybersecurity
35:40 Overprovisioning Security Permissions
41:12 Vendor Access and Security Tools
46:30 Monitoring and Auditing Best Practices
47:57 Tools and Techniques for Better Security
51:36 The Importance of Continuous Improvement
01:01:52 Final Thoughts and Listener Engagement
52 قسمت
اشتراک گذاری
