DSE security knowledge hub

Security knowledge,
without the noise.

Page 210 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.

DSE-authoredOfficial sourcesReviewed guidance
Search the library
DSE post stream

Guidance and analysis from DSE

3,000 articles
DSE visual briefNetworks & infrastructure

Review Linux accounts cannot get AES tickets before AD/DNS changes

Microsoft states: “In an Active Directory Domain Services (AD DS) environment, Linux-integrated accounts receive RC4-encrypted tickets instead of Advanced Encryption Standard (AES)-encrypted tickets when they use Kerberos authentication.”

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the playbook
DSE visual briefNetworks & infrastructure

Scope Set up Windows LAPS in the LAPS properties dialog in observed AD/DNS state

Microsoft states: “Learn how to use the LAPS properties dialog in the Windows Server Active Directory Users and Computers management snap-in to configure Windows Local Administrator Password Solution (Windows LAPS) for Windows Server Active Directory.”

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the briefing
DSE visual briefContinuity & recovery

Detect, mitigate, and contain data-integrity events as one response workflow

NIST SP 1800-26 addresses detecting and responding to ransomware and other destructive data-integrity events. The project describes methods and potential tool sets to detect, mitigate, contain, and support response to data-integrity events.

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the briefing
DSE visual briefContinuity & recovery

A service-continuity plan should identify other continuity plans that affect it or are affected by it. Dependency review should include upstream and downstream services, vendors, outsourced processes, technology suppliers, and competition for recovery staff and space.

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the checklist