14How does Kerberos work in Active Directory, and how do Kerberoasting, Golden Tickets and delegation abuse exploit it?▼hardNewMicrosoftCrowdStrikePalo Alto Networks◆ premiumInterviewers ask for the protocol first because every AD attack is a protocol property used against you. The strong answer derives each attack from a step in the ticket flow, then attaches the control that breaks it.Open full answer →
15How do attackers steal and reuse credentials in a Windows enterprise, and how do you reduce the damage when an endpoint is compromised?▼hardNewMicrosoftCrowdStrikePalo Alto Networks◆ premiumYou cannot stop every laptop being compromised. You can decide what that laptop holds. The strong answer is about which credentials live where, and making stolen ones useless elsewhere.Open full answer →
31How does one infostealer infection on a personal laptop become a breach of your company, and what breaks that chain?▼mediumNewMicrosoftGoogleCrowdStrike◆ premiumInfostealers turned stolen passwords and cookies into a commodity with sellers, buyers and price lists. The scored answer follows the supply chain and cuts it at the points you control.Open full answer →