All posts
Topic · 2 articles
Active Directory: articles and guides
2 PlayCISO articles on active directory, newest first. The most recent is “Network Breach Response Plan: Edge Devices, Lateral Movement and When to Isolate”.
Network Breach Response Plan: Edge Devices, Lateral Movement and When to Isolate
How to respond to a network intrusion: capture evidence from an exploited VPN or firewall before patching, treat credentials that passed through it as stolen, decide what to isolate and how far, and recover from a domain compromise.
October 29, 2026
CISA: Plant Fake Credentials to Catch Hackers
CISA’s 2026 guidance recommends honeytokens, canary accounts and decoy systems to catch living-off-the-land attacks. A deployment roadmap with Sigma rules.
September 18, 2026