DSE security knowledge hub

Cybersecurity
Knowledge

Page 109 of the DSE Cybersecurity knowledge center, with source-backed guidance and practical next steps.

DSE-authoredOfficial sourcesReviewed guidance
Search the library
Explore this topic

Cybersecurity knowledge center

Source-backed guidance for identity, vulnerability reduction, ransomware readiness, detection, response, and recovery.

Start with the cornerstone guide
DSE post stream

Cybersecurity

1,745 articles
DSE visual briefNetworks & infrastructure

Review Linux accounts cannot get AES tickets before AD/DNS changes

Microsoft states: “In an Active Directory Domain Services (AD DS) environment, Linux-integrated accounts receive RC4-encrypted tickets instead of Advanced Encryption Standard (AES)-encrypted tickets when they use Kerberos authentication.”

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the playbook
DSE visual briefNetworks & infrastructure

Scope Set up Windows LAPS in the LAPS properties dialog in observed AD/DNS state

Microsoft states: “Learn how to use the LAPS properties dialog in the Windows Server Active Directory Users and Computers management snap-in to configure Windows Local Administrator Password Solution (Windows LAPS) for Windows Server Active Directory.”

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the briefing
DSE visual briefContinuity & recovery

Detect, mitigate, and contain data-integrity events as one response workflow

NIST SP 1800-26 addresses detecting and responding to ransomware and other destructive data-integrity events. The project describes methods and potential tool sets to detect, mitigate, contain, and support response to data-integrity events.

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the briefing
DSE visual briefContinuity & recovery

Expose shared recovery-resource conflicts across related service-continuity plans

A service-continuity plan should identify other continuity plans that affect it or are affected by it. Dependency review should include upstream and downstream services, vendors, outsourced processes, technology suppliers, and competition for recovery staff and space.

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the checklist
DSE visual briefContinuity & recovery

Extend business impact analysis from availability to every mission-relevant loss

NIST IR 8286D says business impact analysis can extend beyond availability to the mission impact of any type of loss. The described process links mission objectives to enabling assets, criticality and sensitivity factors, and risk prioritization and response.

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the explainer