Guardians of the Directory

Welcome to another episode of Guardians of the Directory , where we pull back the curtain on the real-world challenges in securing and managing Active Directory and hybrid identity environments. In this episode, Craig Birch is joined by Sander Berkouwer , identity veteran, Microsoft MVP, and author of the Active Directory Administration Cookbook , to have a brutally honest conversation about hybri...

Welcome back to Guardians of the Directory ! In this episode, Craig Birch is joined once again by Zero Trust expert Jerry Chapman for a deep dive into the Zero Trust Blueprint—a practical model to help organizations shift from theory to execution. Jerry shares insights from his work as Co-Chair of the CISA Zero Trust Working Group and provides a clear framework covering assessment, strategy, roadm...

In this episode of Directory Insights in 10 Minutes, Craig Birch breaks down the often-misunderstood AdminSDHolder object in Active Directory and why it's a high-value target for attackers. Learn how the SDProp process uses it to secure privileged groups—and how misconfigurations or legacy permissions can open the door to persistent access.🔍 What you’ll learn:What AdminSDHolder and SDProp really...

🔍 Admin Accounts with SPNs — Hidden Risk Behind Kerberoasting | Directory Insights in 10 MinutesIn this episode, Craig Birch breaks down a major Active Directory security blind spot: Kerberoasting via privileged accounts with SPNs (Service Principal Names).You'll learn how attackers exploit these accounts — and how to find, assess, and fix the risk without breaking your apps. Straightforward,...

In this episode of Directory Insights in 10 Minutes, Craig Birch breaks down one of the most overlooked Active Directory misconfigurations: the "Do not require Kerberos pre-authentication" setting.🔍 Why it matters:Enables AS-REP Roasting attacks using tools like Hashcat or John the RipperAllows silent user enumeration without authentication failuresCan go undetected by SIEMs and securit...

Welcome to another episode of Directory Insights in 10 Minutes , powered by Guardians of the Directory . In this quick-hitting session, host Craig Birch walks through the process of identifying and remediating accounts in Active Directory that still rely on outdated Kerberos DES encryption . 🔐 DES is insecure and easily exploited by attackers. Craig shows you how to detect and update these accoun...

Summary: In this episode of Directory Insights in 10 Minutes , we dive into a critical yet often overlooked Active Directory misconfiguration — Allowing Password Storage with Reversible Encryption. This setting can override password policies , leaving user credentials exposed to plaintext extraction through common attacker tools like Mimikatz and DCSync . 🚨 Key Takeaways: ✅ How this misconfigura...

Episode Overview In this episode of Directory Insights in 10 Minutes , we’re exposing a dangerous yet overlooked Active Directory misconfiguration— PasswordNotRequired . Most AD admins assume password policies protect all accounts. They don’t. This attribute allows accounts to override domain password policies, making them vulnerable to blank passwords and easy takeovers. What is the "Passwor...

Directory Insights in 10 Minutes – Episode 1 🛡️ AD’s Biggest Misconfiguration – Fix It Now! Description: Welcome to the first episode of Directory Insights in 10 Minutes , brought to you by Guardians of the Directory . This series is all about cutting through the noise —no fluff, no filler—just real-world, practical security insights for Active Directory and Entra ID admins. In this episode, we’re...

Summary In this episode of Guardians of the Directory, host Craig Birch interviews Kevin Kampman, a veteran in directory services, discussing the evolution of Active Directory, its challenges, and the future of directory management. They explore the historical context of directory services, the impact of cloud technology, and the importance of naming conventions in directory management. Kevin shar...

Summary In this episode of Guardians of the Directory, Craig Birch and Jerry Chapman delve into the concept of Zero Trust in cybersecurity. They discuss its principles, models, and the importance of identity-led security. The conversation highlights the five pillars of Zero Trust, the challenges organizations face with data management, and the complexities of securing applications in a cloud envir...

Chad Nichols discusses the complex challenge of restoring Active Directory after a ransomware attack without risking reinfection. He sheds light on the pitfalls of traditional backup methods, which often carry residual malware, and stresses the importance of clean recovery strategies. This critical insight highlights the balance between operational urgency and long-term security.

Summary In this episode of Guardians of the Directory, host Craig Birch engages with John Harper, founder of Hackers Teaching Hackers, to discuss the evolution of cybersecurity education, the importance of community sharing, and the vulnerabilities within Active Directory. They explore the offensive security landscape, the significance of hands-on learning, and practical strategies for strengtheni...

In this episode of Guardians of the Directory, Craig Birch and Derek Melber delve into the complexities of Active Directory security, focusing on the stealthy threats posed by shadow permissions, DC Shadow, and DC Sync. They discuss the historical context of these vulnerabilities, the role of applications in creating shadow permissions, and the importance of cleaning up orphaned SIDs. The conversa...

Summary This conversation delves into the critical issue of cybersecurity in K-12 education, highlighting the vulnerabilities schools face due to budget constraints, lack of training, and the unique challenges of supporting a diverse student population. Jason, an IT expert, shares insights on the value of school data to cybercriminals, recent case studies of cyber attacks, common attack methods, a...

In this episode of Guardians of the Directory, Craig Birch and Chad Nichols discuss the critical steps needed to recover from a ransomware attack that targets Active Directory. They explore the challenges organizations face during such attacks, the importance of having a solid recovery strategy, and the lessons learned from real-world experiences. The conversation emphasizes the need for preparedn...

In this inaugural episode of Guardians of the Directory, join Craig Birch, Principal Security Engineer and Technical Evangelist at Cayosoft, as he introduces himself and the mission of this podcast dedicated to Active Directory (AD) and Entra ID management, security, and recovery. With over two decades of experience in identity security and a passion for helping AD administrators and security prof...

Summary In this episode of Guardians of the Directory, Craig Birch and Mike Brennan discuss the evolving landscape of cybersecurity, particularly focusing on identity security and the challenges organizations face in preventing ransomware attacks. They explore the inadequacies of traditional security measures, the importance of proactive strategies, and the need for continuous monitoring and moder...