[ 01 :: INDEX :: ARTICLES ]

Articles

Deep-dives, troubleshooting guides, and how-tos.

Step by step guide: Kerberos Hardening (KB5073381)

In this last contet of the Kerberos hardening series, I explain step by step how to manage Kerberos hardening to stay alert, check service by service if there might be any impact, and gradually deploy changes from least to most risky to avoid the biggest possible impact.

A

ADRIÁN·12 July 2026

Read

~/articles/rc4defaultdisablementphase..

Kerberos

RC4DefaultDisablementPhase - How to Identify Accounts Affected by Kerberos Hardening

With a single command, we'll help you obtain a list of accounts that will be affected by the upcoming Kerberos hardening, with the arrival of the RC4DefaultDisablementPhase registry key. We'll also review the new events released by Microsoft in the January cumulative update.

A

ADRIÁN·12 July 2026

Read

~/articles/msds-supportedencryptionty..

Kerberos

msDS-SupportedEncryptionTypes + etypes: How to calculate Kerberos Encryption Types

We continue our content series dedicated to the upcoming Kerberos hardening update. In this one, we show you how to calculate the encryption types for the msDS-SupportedEncryptionTypes attribute and related registry keys, as well as how to differentiate them from etypes.

A

ADRIÁN·12 July 2026

Read

~/articles/cve-2026-20833-what-is-ker..

Kerberos

CVE-2026-20833 - What is Kerberos and how to face RC4 deprecation - Theory

We are starting a new series of contents focused on CVE-2026-20833 and Microsoft's hardening on which AES256 will become the default encryption for service tickets. In this first theoretical article, we explain what Kerberos is, its encryption types, and the change Microsoft is proposing.

A

ADRIÁN·9 July 2026

Read