~/tag/blue-team

#blue team

2 articles tagged blue team

Impacket from Scratch: Kerberoasting, DCSync, and Lateral Movement in a Lab

A hands-on Impacket tutorial for beginners: build a lab, then walk Kerberoasting, AS-REP roasting, secretsdump/DCSync, and remote execution end to end — with the red team, blue team, and attacker view of each, plus the exact Windows event IDs that detect them and the controls that stop them.

Aamir LakhaniJul 24, 202616 min read

Offensive Security Tutorials

BloodHound for Beginners: Mapping the Attack Paths Hiding in Active Directory

Build a lab Active Directory domain, collect it with SharpHound, and use BloodHound CE to find the permission chains that lead to Domain Admin — plus how red teams, blue teams, and real attackers each use it, and how to detect and dismantle the paths.

Aamir LakhaniJul 24, 202621 min read