[ 02 :: INDEX :: VIDEOS ]

Videos

Step-by-step walkthroughs and technical breakdowns.

~/videos/authentication-policies-..▶ VIDEO
 Authentication Policies and Authentication Policy Silos Deployment
Active Directory

Authentication Policies and Authentication Policy Silos Deployment

In this video, I explain what authentication policies and authentication policy silos are, as well as other related concepts: tiering, FAST armoring, and Compound Authentication. Later on, I carry out a deployment of these authentication policies, showing pre-requisites, needed configurations, and how they restrict authentication.

A
ADRIÁN·24 July 2026
Watch
~/videos/60-useful-commands-for-w..▶ VIDEO
60 useful commands for Windows System Administrators
CLI

60 useful commands for Windows System Administrators

In this new video series, we review the most important PowerShell and CMD commands for a system administrator. In this first video, we cover some of the most common and useful general commands for both Windows Server and Windows client versions. In upcoming videos, we'll review other useful commands for Active Directory, networking, PKI, and WinRM, among others. Chapters 00:00 Introduction 00:12 Commands for future videos 02:09 Basic commands 02:55 Support commands 16:25 Informative commands 34:35 Console's access 39:56 Commands for registry keys and certificates 50:04 Other administrative commands 01:16:52 Ending

A
ADRIÁN·12 July 2026
Watch
~/videos/kb4520412-ldap-or-ldaps-..▶ VIDEO
KB4520412: LDAP or LDAPS? Harden your AD domain with LDAP Integrity - Practical Lesson
Active Directory

KB4520412: LDAP or LDAPS? Harden your AD domain with LDAP Integrity - Practical Lesson

We can require LDAP Signing since March 2020 with KB4520412. In this video we describe the differences among LDAP, LDAPS and LDAP Secure. After that, we check the different policies that can be used to harden LDAP: either with LDAP signing, LDAP sealing or SSL encryption with Windows Server 2025 and older. Chapters: 00:00 Introduction 00:12 Practice requirements 02:33 LDAP, LDAPS and LDAP Secure differences 05:02 Policies for LDAP Secure 19:54 Testing without any hardening 37:14 Testing Domain Controller: LDAP Server Signing Requirements 43:59 Testing Domain Controller: LDAP Server Signing Requirements Enforcement 45:51 Testing Network Security: LDAP Client Signing Requirements 56:10 Testing Network Security: LDAP Client Encryption Requirements 01:03:18 Final thoughts

A
ADRIÁN·12 July 2026
Watch
~/videos/step-by-step-guide-kerbe..▶ VIDEO
Step by step guide: Kerberos Hardening (KB5073381)
Kerberos

Step by step guide: Kerberos Hardening (KB5073381)

In this last video of the Kerberos series, we show you step by step, in chronological order, how to tackle the patch that hardens Kerberos, using AES encryption instead of RC4. 00:00 Introduction 00:16 Initial Steps 04:15 Inform account's responsibles 09:23 Pre-hardening 13:43 Progressive hardening 18:35 End of video

A
ADRIÁN·12 July 2026
Watch
~/videos/3-quick-fixes-to-stay-sa..▶ VIDEO
3 Quick Fixes to Stay Safe from Kerberos 2026 Hardening
Kerberos

3 Quick Fixes to Stay Safe from Kerberos 2026 Hardening

In this short practical video, I explain 3 "quick ways" to avoid the impact of Kerberos hardening. These are 3 solutions that shouldn't be considered as definitive, but they will help us buy time before Kerberos hardening is forced. Workarounds: 00:00 DefaultDomainSupportedEncTypes 02:05 RC4DefaultDisablementPhase 06:56 No update

A
ADRIÁN·12 July 2026
Watch
~/videos/rc4defaultdisablementpha..▶ VIDEO
RC4DefaultDisablementPhase - How to Identify Accounts Affected by Kerberos Hardening
Kerberos

RC4DefaultDisablementPhase - How to Identify Accounts Affected by Kerberos Hardening

With a single command, we'll help you obtain a list of accounts that will be affected by the upcoming Kerberos hardening, with the arrival of the RC4DefaultDisablementPhase registry key. We'll also review the new events released by Microsoft in the January cumulative update.

A
ADRIÁN·12 July 2026
Watch
~/videos/cve-2026-20833-msds-supp..▶ VIDEO
CVE-2026-20833 - msDS-SupportedEncryptionTypes + etypes: How to calculate Kerberos Encryption Types
Kerberos

CVE-2026-20833 - msDS-SupportedEncryptionTypes + etypes: How to calculate Kerberos Encryption Types

We continue our video series dedicated to the upcoming Kerberos hardening update. In this one, we show you how to calculate the encryption types for the msDS-SupportedEncryptionTypes attribute and related registry keys, as well as how to differentiate them from etypes. 00:00 Intro 00:12 msDS-SupportedEncryptionTypes 11:46 DefaultDomainSupportedEncTypes 16:34 SupportedEncryptionTypes 23:38 etypes 26:33 Next contents

A
ADRIÁN·12 July 2026
Watch
~/videos/cve-2026-20833-what-is-k..▶ VIDEO
 CVE-2026-20833 - What is Kerberos and how to face RC4 deprecation - Theorical lesson
Kerberos

CVE-2026-20833 - What is Kerberos and how to face RC4 deprecation - Theorical lesson

We are starting a new series of videos focused on CVE-2026-20833 and Microsoft's hardening on which AES256 will become the default encryption for service tickets. In this first theoretical video, we explain what Kerberos is, its encryption types, and the change Microsoft is proposing. In subsequent videos, I will show you: Decrypting msDS-SupportedEncryptionTypes and etypes Hardening remediation, temporary workaround Finding affected accounts Step by step: procedure for hardening

A
ADRIÁN·9 July 2026
Watch