Ninjasta
Microsoft Identity, Enterprise Security & Automation
Insights from an italian bit worker
Identity and Security
Identity is the new security perimeter. This section focuses on protecting Active Directory, Microsoft Entra ID and enterprise identities through practical guidance, real-world attack scenarios and defensive strategies. Topics include privilege escalation, credential attacks, tiering, authentication, identity governance and security best practices for modern Microsoft environments.
-
Read More: OSINT: The Art of Discovering Everything About Anyone (Legally)OSINT: The Art of Discovering Everything About Anyone (Legally)
posted
read in
3–4 minutesWe live surrounded by data. Every post, every like, every photo we share is another breadcrumb left along our digital…
-
Read More: Social Engineering: How Hackers Trick You Without Touching a Line of Code
Social Engineering: How Hackers Trick You Without Touching a Line of Code
posted
read in
4–6 minutesFirewalls stop malware. Antivirus blocks malicious software. Multi-factor authentication protects stolen passwords.But what protects you from yourself?Long before ransomware, AI-generated…
-
Read More: Exchange and Active Directory: The Hidden Permissions Still Lurking in Your Domain
Exchange and Active Directory: The Hidden Permissions Still Lurking in Your Domain
posted
read in
3–5 minutesMicrosoft Exchange has always been one of the services most deeply integrated with Active Directory.And that’s exactly why it deserves…
-
Read More: Lateral Movement in MIcrosoft Entra ID: What Still Works in 2025
Lateral Movement in MIcrosoft Entra ID: What Still Works in 2025
posted
read in
6–9 minutesEveryone says their environment is “Zero Trust.”However, a single token from a hybrid-joined device can still allow silent lateral movement…
-
Read More: Shadow Admins in Active Directory: The Privilege You Don’t See (Until It’s Too Late)
Shadow Admins in Active Directory: The Privilege You Don’t See (Until It’s Too Late)
posted
read in
2–3 minutesEveryone monitors Domain Admins.Very few monitor Shadow Admins.Shadow Admins are accounts that are not members of privileged groups, yet still…
-
Read More: Kerberoasting: How It Works, How to Defend, and How to Minimize the Damage
Kerberoasting: How It Works, How to Defend, and How to Minimize the Damage
posted
read in
11–17 minutesKerberos is one of the foundations of authentication in Active Directory.It allows users and services to authenticate securely without sending…
-
Read More: Quantum Computing and Cybersecurity: How Companies Can Prepare for the Quantum Wave
Quantum Computing and Cybersecurity: How Companies Can Prepare for the Quantum Wave
posted
read in
4–6 minutesIntroduction The tech world is quietly approaching a disruptive moment: the rise of quantum computing.This isn’t science fiction or something…
-
Read More: Pass-the-Hash (PtH): Attack Technique and Complete Defenses
Pass-the-Hash (PtH): Attack Technique and Complete Defenses
posted
read in
3–5 minutesWhat is Pass-the-Hash? Pass-the-hash (PtH) is an attack technique that allows an attacker to authenticate to a remote system using…
-
Read More: Tiering in Active Directory: Effective Strategy to Increase Security and Resiliency
Tiering in Active Directory: Effective Strategy to Increase Security and Resiliency
posted
read in
2–4 minutesActive Directory (AD) is the beating heart of identity and IT asset management in many organizations. Being a critical system,…