Validate Use the online dbdump feature in Ldp.exe with AD/DNS evidence
Microsoft states: “This article describes how to use the online dbdump feature of Active Directory.”
Read the checklistDSE security knowledge hubCybersecurity
Cybersecurity
Knowledge
Page 124 of the DSE Cybersecurity knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide Cybersecurity knowledge center
Source-backed guidance for identity, vulnerability reduction, ransomware readiness, detection, response, and recovery.
DSE post stream
1,892 articlesCybersecurity
Stage Target Principal Name is incorrect when manually replicating data between domain controllers with AD/DNS rollback checks
Microsoft states: “This article provides a solution to an error that occurs when you manually replicate data between domain controllers.”
Read the explainer
Trace The NETLOGON share is not present
Microsoft states: “This article provides a workaround for an issue that occurs after you install Active Directory Domain Services on a new full or read-only Windows Server 2008-based domain controller.”
Read the guide
Review Syskey.exe utility is no longer supported before AD/DNS changes
Microsoft states: “Windows 10, version 1709, Windows Server, version 2004 and later versions of Windows no longer support the syskey.exe utility.”
Read the playbook
Detect, mitigate, and contain data-integrity events as one response workflow
NIST SP 1800-26 addresses detecting and responding to ransomware and other destructive data-integrity events. The project describes methods and potential tool sets to detect, mitigate, contain, and support response to data-integrity events.
Read the briefing
Expose shared recovery-resource conflicts across related service-continuity plans
A service-continuity plan should identify other continuity plans that affect it or are affected by it. Dependency review should include upstream and downstream services, vendors, outsourced processes, technology suppliers, and competition for recovery staff and space.
Read the checklist
Extend business impact analysis from availability to every mission-relevant loss
NIST IR 8286D says business impact analysis can extend beyond availability to the mission impact of any type of loss. The described process links mission objectives to enabling assets, criticality and sensitivity factors, and risk prioritization and response.
Read the explainer
Identify devices, data, applications, and vulnerabilities before a destructive data event
NIST SP 1800-25 treats devices, data, and applications as assets that can become targets of data-integrity attacks. Its example solution combines asset identification and protection methods including backups, secure storage, integrity checks, logs, and vulnerability management.
Read the guide
Keep system plans current with control status and named responsibilities
NIST SP 800-18 Rev. 2 collectively calls the system security, privacy, and C-SCRM plans 'system plans.'. NIST says those plans describe system purpose, control operational status, and responsibilities and expected behavior of people who manage, support, and access the system.
Read the playbook
Prioritize cyber risks by enterprise impact before selecting a response
NIST IR 8286B describes prioritizing identified cybersecurity risks by their potential impact on enterprise objectives. It describes adding priority and response information to a cybersecurity risk register in support of an enterprise risk register.
Read the briefing