))
E25 - Clean Up Your Act: Boosting Security Through Account Hygiene
Manage episode 446128078 series 3555974
Anthony Kent & Tanner Greer, Anthony Kent, and Tanner Greer에서 제공하는 콘텐츠입니다. 에피소드, 그래픽, 팟캐스트 설명을 포함한 모든 팟캐스트 콘텐츠는 Anthony Kent & Tanner Greer, Anthony Kent, and Tanner Greer 또는 해당 팟캐스트 플랫폼 파트너가 직접 업로드하고 제공합니다. 누군가가 귀하의 허락 없이 귀하의 저작물을 사용하고 있다고 생각되는 경우 여기에 설명된 절차를 따르실 수 있습니다 https://ko.player.fm/legal.
In this comprehensive episode, we explore critical aspects of managing IT security, focusing on Active Directory audits, password hygiene, and privilege management. We share practical strategies for conducting thorough security audits, managing group policies, and ensuring effective password practices using tools like CrowdStrike and Microsoft Azure.
Emphasis is placed on minimizing over-privileged accounts, leveraging secure remote access tools, and implementing Multi-Factor Authentication (MFA) to enhance security. The discussion extends to the importance of dynamic employee groups, regular auditing of both AD and non-AD integrated systems, and the necessity of maintaining detailed documentation for enhanced cybersecurity. Real-life examples and practical advice underscore the importance of curiosity and constant improvement in IT security practices, with regular reviews and a proactive approach to identifying and mitigating risks.
Microsoft Entra Password Protection - Microsoft Entra ID | Microsoft Learn https://learn.microsoft.com/en-us/entra/identity/authentication/concept-password-ban-bad-on-premises
Group Policy: Automatically Delete User Profiles Older Than Certain Number of Days Win 10 not working. - Microsoft Q&A https://learn.microsoft.com/en-us/answers/questions/441800/group-policy-automatically-delete-user-profiles-ol
00:00 Introduction and Episode Overview
00:04 Listener's Request: Active Directory Audit
02:14 Account Hygiene Tips and Auditing Processes
02:36 Handling Stale Accounts and Group Policies
04:48 Group Memberships and Elevated Access
09:35 Password Management and Security
16:41 Auditing GPOs and Password Expirations
19:56 Dynamic Groups and Documentation
29:34 File Sharing and Ransomware Stories
31:38 The Dangers of Open Shares
32:37 The Importance of Regular Audits
32:55 Onboarding and Job Role Audits
33:49 Offboarding and Permission Management
34:48 Curiosity in Cybersecurity
35:40 Overprovisioning Security Permissions
41:12 Vendor Access and Security Tools
46:30 Monitoring and Auditing Best Practices
47:57 Tools and Techniques for Better Security
51:36 The Importance of Continuous Improvement
01:01:52 Final Thoughts and Listener Engagement
28 에피소드
공유
