Aadinternals.com

Spoofing Azure AD sign-ins logs by imitating AD FS …

WebThe Health Agent for AD FS has been there for years to report the health of the service. In March 2021, Microsoft announced that a public preview for AD FS sign-ins in Azure AD …

Actived: 8 days ago

URL: https://aadinternals.com/post/hybridhealthagent/

Azure Active Directory

WebAzure AD Connect Health is a feature that allows viewing the health of on-prem hybrid infrastructure components, including Azure AD Connect and AD FS servers. Health …

Category: Health Go Health

Spoofing and Tampering with Azure AD Sign-ins log

WebStep 8: Send a signature to events hub. Signing key derived from the AgentKey: SHA512 calculated from the AgentKey. Result converted to hex string. Result converted to binary …

Category: Health Go Health

Making the most of Microsoft cloud bug bounty programs: …

Web•ADFS Health Agent is providing sign-in activity from on-prem AD FS to Azure AD •Compromising AD FS server allowed overwriting existing sign-ins events •Bug bounty …

Category: Health Go Health

Attacking Azure Active Directory Under-The-Radar

WebHybrid Authentication Options * Supports seamless single sign-on Password-hash synchronization (PHS) * Azure AD Connect Active Directory Azure Active

Category: Health Go Health

AADInternals.com

WebMulti-factor Authentication (MFA) and Conditional Access (CA) policies are powerful tools to protect Azure AD users’ identities. For instance, one may allow access only from …

Category: Health Go Health

Exporting AD FS certificates revisited: Tactics, Techniques and …

WebThe configuration can be exported from any AD FS server of the farm, regardless are they primary or secondary nodes. Technically, the export is performed by executing a SQL …

Category: Health Go Health

Deep-dive to Azure AD Pass-Through Authentication

WebAzure Active Directory Pass-through Authentication (PTA) is an authentication method allowing users to sign in to on-premises and Azure AD/Office 365 using the same …

Category: Health Go Health

Azure AD Security Testing with AADInternals

WebAdversary emulation helps to protect against specific adversaries that matters to you/your business. Open-source tools (e.g. AADInternals, Mimikatz,..) can be used to conduct …

Category: Health Go Health

AADInternals admin and blue team tools

WebOpen-Source Intelligence (OSINT) References. AADInternals toolkit is best known of its offensive or red teams tools. Its origins, however, is in administration - especially for …

Category: Health Go Health