Skip to content
Author

Ney Gelbcke Junior

Founder & Principal Engineer, Retrievy

Builds Retrievy, a security posture platform covering cloud, identity, Active Directory and network configuration. Works day to day on the collection and analysis side: Group Policy precedence, FortiGate policy behaviour, and identity escalation paths across Active Directory and Entra ID.

LinkedIn profile

Writes about

  • Active Directory security
  • Group Policy auditing
  • FortiGate configuration hardening
  • Cloud security posture management
  • Identity and privilege escalation paths

Articles by Ney Gelbcke Junior

Articles FortiGate Hardening Guide: Close the Attack Surface in Execution Order Aug 27, 2026 Articles ADCS Certificate Request Audit: Parsing Logs to Catch Unauthorized Enrollment Aug 24, 2026 Articles FortiGate Address Object Cleanup: Audit and Remove Stale IP and FQDN Definitions Aug 19, 2026 Articles Is My Firewall Actually Inspecting Traffic, or Just Pretending To? Jul 27, 2026 Identity Security What Is Active Directory Tiering and Why Does My Business Need It? Jul 23, 2026 Articles Active Directory Security Groups: What Operators Need to Know Jul 20, 2026 Articles Active Directory Security Best Practices: An Operator Checklist for Hardening AD Jul 17, 2026 Articles FortiGate Hardening Best Practices: A Numbered Operator Playbook for Closing the Attack Surface Jul 15, 2026 Articles Active Directory Security Assessment: What to Check First Jul 13, 2026 Articles GPO X-Ray walkthrough: what a single policy actually controls Jul 7, 2026 Releases Introducing Identity X-Ray: See What Your Permissions Actually Grant Jul 5, 2026 Threat Intel FortiGate SSL Inspection: What to Decrypt, What to Bypass, and How to Audit It Jun 17, 2026 Threat Intel Kerberoasting in 2026: Why This Attack Still Works on Your AD Jun 15, 2026 Articles Domain Controller Hardening: The Seven Settings That Matter Most Jun 10, 2026 Articles Identity Security Posture Management for Active Directory and Entra ID: A Practical Guide Jun 8, 2026 Articles Group Policy Audit: A Continuous Pattern That Beats Annual Reviews Jun 5, 2026 Articles Cloud Security Posture Management Explained: What CSPM Actually Does for Operators Jun 3, 2026 Articles FortiGate Hardening: What Good Looks Like in 2026 for Production Clusters Jun 1, 2026 Articles Active Directory Security Checklist: 32 Quarterly Checks Every AD Operator Should Run May 29, 2026 Threat Intel Storm-2697's Go Ransomware Spreads Itself Across Your Entire Network May 28, 2026 Articles Cloud Security Posture Management. Audit Automation Is the Easy Part May 27, 2026 Articles FortiGate Firewall Compliance Audit Tool: Beyond CIS with Policy X-Ray May 25, 2026 Articles Active Directory Security Audit Tool: From Configured to Applied May 23, 2026 Identity Security Your AD Has 200 Service Accounts. How Many Are Ghosts? May 22, 2026 Releases Framework Builder: ship your own compliance catalogs from inside the Compliance Hub May 21, 2026 Threat Intel YellowKey CVE-2026-45585 Bypasses BitLocker Before a Patch Lands May 21, 2026 Threat Intel Ivanti, Fortinet, SAP, VMware, n8n Drop Patches for Critical RCE and Privilege Flaws May 19, 2026 Threat Intel MiniPlasma Zero-Day PoC Drops: Unpatched Windows SYSTEM Escalation May 18, 2026 Releases X-Ray Vision for FortiGate and Active Directory: What Your Audit Tool Isn't Showing You May 16, 2026 Threat Intel Microsoft's 138-Patch Drop Puts DNS and Netlogon RCE Front and Center May 14, 2026 Threat Intel Two New Windows Zero-Days Target BitLocker and CTFMON Privilege Escalation May 14, 2026 Threat Intel AI-Generated Zero-Day Exploit Bypasses 2FA at Scale in the Wild May 13, 2026 Threat Intel Critical RCE Vulnerabilities Hit FortiSandbox and FortiAuthenticator: Patch Now May 13, 2026 Threat Intel Password Resets Alone Won't Evict Attackers From Active Directory May 11, 2026 Threat Intel CISA's Four-Day Ivanti EPMM Deadline Should Reset Your Patch Clock Too May 9, 2026 Threat Intel Ransomware Hits Backups First — Your Recovery Plan Is the Target May 8, 2026 Threat Intel MuddyWater Hides Espionage Operations Behind Chaos Ransomware Smoke Screen May 7, 2026