Hardening Library

Security research, tutorials, and product updates from the Retrievy team

Multi-cloud security, FortiGate hardening, AD/identity risk, and configuration drift. Written by operators for operators.

Browse by: Articles 17 Releases 3 Threat Intel 14 Identity Security 2
Introducing Identity X-Ray: See What Your Permissions Actually Grant
Editor's Pick
Releases

Introducing Identity X-Ray: See What Your Permissions Actually Grant

Your list of admins is not your attack surface. Here is how to map the real identity attack paths, on-prem and in the cloud, and find the shadow admins who can reach Tier 0 through a chain nobody documented.

N
Ney Gelbcke Junior Jul 05 · 9 min
Read
Domain Controller Hardening: The Seven Settings That Matter Most
Articles
4 min read

Domain Controller Hardening: The Seven Settings That Matter Most

A quarterly DC review checklist covering LDAP signing, channel binding, SMB signing, SMB v1, NTLM auditing, restricted RPC, and DCSync delegation hygiene. Each item shows what bad looks like, what good looks like, and why it matters.

R
Retrievy Team
Read Now
Storm-2697's Go Ransomware Spreads Itself Across Your Entire Network
Threat Intel
3 min read

Storm-2697's Go Ransomware Spreads Itself Across Your Entire Network

The Gentlemen ransomware, deployed by Storm-2697 affiliates, is a Go-based encryptor that combines ephemeral per-file key encryption with aggressive built-in lateral movement to self-propagate across networks without operator intervention.

R
Retrievy Team
Read Now
Cloud Security Posture Management. Audit Automation Is the Easy Part
Articles
5 min read

Cloud Security Posture Management. Audit Automation Is the Easy Part

Cloud security posture management audit automation has gotten good at scanning. The harder part is what happens to a finding after the scan. That is where most security teams still lose ground, and where the next generation of tooling has to earn its keep.

N
Ney Gelbcke Junior
Read Now
Active Directory Security Audit Tool: From Configured to Applied
Articles
5 min read

Active Directory Security Audit Tool: From Configured to Applied

An Active Directory security audit tool can prove a GPO exists. It cannot, on its own, prove the policy is being applied to the machines that need it. That gap is where most domains quietly stop being defensible, regardless of how clean the audit looks.

N
Ney Gelbcke Junior
Read Now
Your AD Has 200 Service Accounts. How Many Are Ghosts?
Identity Security
8 min read

Your AD Has 200 Service Accounts. How Many Are Ghosts?

Most AD environments have dozens of forgotten service accounts carrying admin-level privileges. Learn how ghost service accounts become breach vectors, and how to find them before attackers do.

N
Ney Gelbcke Junior
Read Now
YellowKey CVE-2026-45585 Bypasses BitLocker Before a Patch Lands
Threat Intel
3 min read

YellowKey CVE-2026-45585 Bypasses BitLocker Before a Patch Lands

Microsoft has issued a mitigation for CVE-2026-45585, a publicly disclosed BitLocker bypass zero-day dubbed YellowKey, while a full patch is still pending. CVSS 6.8 understates the risk for encrypted-disk-dependent security models.

R
Retrievy Team
Read Now

Popular topics

#active-directory #privilege-escalation #fortinet #group-policy #network-security #ISPM #adcs #fortigate #fortios #patch-management #zero-day #compliance #identity-security #entra-id #hardening #incident-response #kerberos #policy-audit #ransomware #threat-intel

Cookie Preferences

We use essential cookies to make our site work, including privacy-first, cookieless analytics that never collect personal data. With your consent, we may also use non-essential marketing cookies. See our Cookie Policy.