Skip to content

Instantly share code, notes, and snippets.

@wesley974
Created February 20, 2025 18:46
Show Gist options
  • Save wesley974/827f53aa903a97d0990bcddf8034b615 to your computer and use it in GitHub Desktop.
Save wesley974/827f53aa903a97d0990bcddf8034b615 to your computer and use it in GitHub Desktop.
Sysadmin notes
https://p0w3rsh3ll.wordpress.com/2019/03/07/applocker-and-powershell-how-do-they-tightly-work-together
https://techcommunity.microsoft.com/blog/coreinfrastructureandsecurityblog/decrypting-the-selection-of-supported-kerberos-encryption-types/1628797
https://techcommunity.microsoft.com/blog/coreinfrastructureandsecurityblog/active-directory-hardening-series---part-1-%E2%80%93-disabling-ntlmv1/3934787
https://techcommunity.microsoft.com/blog/coreinfrastructureandsecurityblog/active-directory-hardening-series---part-2-%E2%80%93-removing-smbv1/3988317
https://techcommunity.microsoft.com/blog/coreinfrastructureandsecurityblog/active-directory-hardening-series---part-3-%E2%80%93-enforcing-ldap-signing/4066233
https://techcommunity.microsoft.com/blog/coreinfrastructureandsecurityblog/active-directory-hardening-series---part-4-%E2%80%93-enforcing-aes-for-kerberos/4114965
https://techcommunity.microsoft.com/blog/coreinfrastructureandsecurityblog/active-directory-hardening-series---part-5-%E2%80%93-enforcing-ldap-channel-binding/4235497
https://techcommunity.microsoft.com/blog/coreinfrastructureandsecurityblog/active-directory-hardening-series---part-6-%E2%80%93-enforcing-smb-signing/4272168
https://techcommunity.microsoft.com/blog/coreinfrastructureandsecurityblog/active-directory-hardening-series---part-7-%E2%80%93-implementing-least-privilege/4366626
https://learn.microsoft.com/en-us/powershell/module/applocker/get-applockerpolicy?view=windowsserver2025-ps
https://www.vincentliefooghe.net/content/activation-ldaps-sur-active-directory
https://learn.microsoft.com/fr-fr/troubleshoot/windows-server/active-directory/enable-ldap-over-ssl-3rd-certification-authority
https://runasradio.com
https://learning.oreilly.com/library/view/windows-server-2019/9780135492222/ch19.xhtml#ch19lev1sec1
https://techcommunity.microsoft.com/blog/coreinfrastructureandsecurityblog/active-directory-hardening-series---part-1-%E2%80%93-disabling-ntlmv1/3934787
https://www.reddit.com/r/sysadmin
https://arttoolkit.github.io/#+Windows
https://www.pingcastle.com/documentation/scanner
https://www.cyberly.org/en/how-do-you-use-nessus-to-assess-vulnerabilities-in-active-directory/index.html
https://www.amazon.com/Windows-Server-2019-Active-Directory-ebook/dp/B0B36TYJK9
https://www.barnesandnoble.com/w/microsoft-active-directory-a-complete-guide-2019-edition-gerardus-blokdyk/1132633627
https://www.ebooks.com/en-us/book/210341947/mastering-windows-server-2019/jordan-krause/
https://blog.yuuta.moe/2023/04/16/setup-ad-yubikey/
https://www.bordergate.co.uk/windows-domain-authentication-with-yubikey/
https://contos.io/yubikey-support-in-adfs-on-windows-server-2019-69d2fae9adc8
https://learn.microsoft.com/en-us/troubleshoot/windows-server/active-directory/ldap-over-ssl-connection-issues
https://learn.microsoft.com/en-us/archive/technet-wiki/2980.ldap-over-ssl-ldaps-certificate
https://community.senhasegura.io/t/step-by-step-guide-to-configuring-ldaps-on-windows-server-ad-ds/2916
https://wiki.articatech.com/en/active-directory/active-directory-ldap-ssl-windows-2022
https://hotcakex.github.io
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment