Resilix, Benjamin Bosch SMB, NTLM and Legacy Authentication Hardening After addressing permissions, object abuse and directory-level risks, the next area that deserves attention is how systems actually communicate and authenticate on the network. In many Active Director... Roadmap Jun 12, 2026 AD Security
Resilix, Hendrik Noben CIM - Containment In the previous post, we covered Identification: detecting that something is wrong, validating the threat, and understanding its scope. You've confirmed an incident is real. Now what? This is where Co... Roadmap Jun 4, 2026 Cyber Incident Management
Resilix, Guillaume Bossiroy Zero Trust - Network and Location Context In the previous posts, we covered identity, identity risk, devices, and applications as the dimensions Zero Trust uses to make access decisions. Each adds context to whether a sign-in should be allowe... Roadmap May 27, 2026 M365 Security
Resilix, Benjamin Bosch AD Security - LDAP Security and Directory Exposure This post is part of a series on Active Directory hardening. Previous editions covered credential protection, privileged access management, and Kerberos abuse. Each step builds on the last, and this m... Roadmap May 11, 2026 AD Security
Resilix, Hendrik Noben CIM - Identification In the Preparation posts of this Incident Management Roadmap, we covered the foundations: Governance (your emergency manual), Technology (your locks and cameras), Communication (your crisis messaging)... Roadmap May 8, 2026 Cyber Incident Management
Resilix, Guillaume Bossiroy Zero Trust - Application Context and Consent In the previous posts, we established Microsoft Entra ID as the primary enforcement point for cloud access, introduced dynamic identity trust with Entra ID Protection, and added device compliance and ... Roadmap Apr 30, 2026 M365 Security
Resilix, Benjamin Bosch AD Security - Permissions and Object Abuse After addressing credentials, privileged access and Kerberos abuse, the next major area attackers rely on is Active Directory object permissions. While credentials and authentication get most of the a... Roadmap Apr 23, 2026 AD Security
Resilix, Hendrik Noben CIM - Preparation: People In the previous posts of the Incident Management Roadmap, we covered Governance (your emergency manual and legal foundation), Technology (the locks, cameras, and alarms), and Communication (getting th... Roadmap Apr 20, 2026 Cyber Incident Management
Resilix, Guillaume Bossiroy Zero Trust - Devices as Trust Signals In the previous posts, we established identity as the primary enforcement point and introduced identity risk as a signal to influence access decisions. However, focusing on identity alone is not suffi... Roadmap Mar 30, 2026 M365 Security
Resilix, Benjamin Bosch AD Security - Kerberos Abuse Prevention After tightening credential hygiene and regaining control over privileged accounts, the next logical focus area in Active Directory hardening is Kerberos. Kerberos is at the heart of Windows authentic... Roadmap Mar 19, 2026 AD Security
Resilix, Hendrik Noben CIM - Preparation: Communication Imagine a flight crew facing severe turbulence. If the captain, co-pilot, and cabin crew don't communicate clearly, confusion spreads instantly. Passengers panic. Decisions get delayed. Small issues e... Roadmap Mar 3, 2026 Cyber Incident Management
Resilix, Guillaume Bossiroy Zero Trust - Identity Risk and Protection In the previous post, we established Microsoft Entra ID as the primary enforcement point for access to cloud resources and discussed how to secure identities with Multi-Factor Authentication and passw... Roadmap Feb 26, 2026 M365 Security