Author
Ney Gelbcke Junior
Founder & Principal Engineer, Retrievy
Builds Retrievy, a security posture platform covering cloud, identity, Active Directory and network configuration. Works day to day on the collection and analysis side: Group Policy precedence, FortiGate policy behaviour, and identity escalation paths across Active Directory and Entra ID.
LinkedIn profileWrites about
- Active Directory security
- Group Policy auditing
- FortiGate configuration hardening
- Cloud security posture management
- Identity and privilege escalation paths
Articles by Ney Gelbcke Junior
Articles
FortiGate Hardening Guide: Close the Attack Surface in Execution Order
Aug 27, 2026
Articles
ADCS Certificate Request Audit: Parsing Logs to Catch Unauthorized Enrollment
Aug 24, 2026
Articles
FortiGate Address Object Cleanup: Audit and Remove Stale IP and FQDN Definitions
Aug 19, 2026
Articles
Is My Firewall Actually Inspecting Traffic, or Just Pretending To?
Jul 27, 2026
Identity Security
What Is Active Directory Tiering and Why Does My Business Need It?
Jul 23, 2026
Articles
Active Directory Security Groups: What Operators Need to Know
Jul 20, 2026
Articles
Active Directory Security Best Practices: An Operator Checklist for Hardening AD
Jul 17, 2026
Articles
FortiGate Hardening Best Practices: A Numbered Operator Playbook for Closing the Attack Surface
Jul 15, 2026
Articles
Active Directory Security Assessment: What to Check First
Jul 13, 2026
Articles
GPO X-Ray walkthrough: what a single policy actually controls
Jul 7, 2026
Releases
Introducing Identity X-Ray: See What Your Permissions Actually Grant
Jul 5, 2026
Threat Intel
FortiGate SSL Inspection: What to Decrypt, What to Bypass, and How to Audit It
Jun 17, 2026
Threat Intel
Kerberoasting in 2026: Why This Attack Still Works on Your AD
Jun 15, 2026
Articles
Domain Controller Hardening: The Seven Settings That Matter Most
Jun 10, 2026
Articles
Identity Security Posture Management for Active Directory and Entra ID: A Practical Guide
Jun 8, 2026
Articles
Group Policy Audit: A Continuous Pattern That Beats Annual Reviews
Jun 5, 2026
Articles
Cloud Security Posture Management Explained: What CSPM Actually Does for Operators
Jun 3, 2026
Articles
FortiGate Hardening: What Good Looks Like in 2026 for Production Clusters
Jun 1, 2026
Articles
Active Directory Security Checklist: 32 Quarterly Checks Every AD Operator Should Run
May 29, 2026
Threat Intel
Storm-2697's Go Ransomware Spreads Itself Across Your Entire Network
May 28, 2026
Articles
Cloud Security Posture Management. Audit Automation Is the Easy Part
May 27, 2026
Articles
FortiGate Firewall Compliance Audit Tool: Beyond CIS with Policy X-Ray
May 25, 2026
Articles
Active Directory Security Audit Tool: From Configured to Applied
May 23, 2026
Identity Security
Your AD Has 200 Service Accounts. How Many Are Ghosts?
May 22, 2026
Releases
Framework Builder: ship your own compliance catalogs from inside the Compliance Hub
May 21, 2026
Threat Intel
YellowKey CVE-2026-45585 Bypasses BitLocker Before a Patch Lands
May 21, 2026
Threat Intel
Ivanti, Fortinet, SAP, VMware, n8n Drop Patches for Critical RCE and Privilege Flaws
May 19, 2026
Threat Intel
MiniPlasma Zero-Day PoC Drops: Unpatched Windows SYSTEM Escalation
May 18, 2026
Releases
X-Ray Vision for FortiGate and Active Directory: What Your Audit Tool Isn't Showing You
May 16, 2026
Threat Intel
Microsoft's 138-Patch Drop Puts DNS and Netlogon RCE Front and Center
May 14, 2026
Threat Intel
Two New Windows Zero-Days Target BitLocker and CTFMON Privilege Escalation
May 14, 2026
Threat Intel
AI-Generated Zero-Day Exploit Bypasses 2FA at Scale in the Wild
May 13, 2026
Threat Intel
Critical RCE Vulnerabilities Hit FortiSandbox and FortiAuthenticator: Patch Now
May 13, 2026
Threat Intel
Password Resets Alone Won't Evict Attackers From Active Directory
May 11, 2026
Threat Intel
CISA's Four-Day Ivanti EPMM Deadline Should Reset Your Patch Clock Too
May 9, 2026
Threat Intel
Ransomware Hits Backups First — Your Recovery Plan Is the Target
May 8, 2026
Threat Intel
MuddyWater Hides Espionage Operations Behind Chaos Ransomware Smoke Screen
May 7, 2026