Hardening Library

Security research, tutorials, and product updates from the Retrievy team

Multi-cloud security, FortiGate hardening, AD/identity risk, and configuration drift. Written by operators for operators.

5 articles match
of 34 total
What Is Active Directory Tiering and Why Does My Business Need It?
Identity Security
20 min read

What Is Active Directory Tiering and Why Does My Business Need It?

Most Active Directory environments have a tiering diagram in a compliance binder and no enforcement in production. Here's why the gap persists, and why verification after project close matters more than the initial design.

N
Ney Gelbcke Junior
Read Now
Kerberoasting in 2026: Why This Attack Still Works on Your AD
Threat Intel
2 min read

Kerberoasting in 2026: Why This Attack Still Works on Your AD

Kerberoasting persists because most environments still have SPN-mapped service accounts with RC4 enabled and passwords that have not rotated in years. Here is what continuous ISPM monitoring catches and what good looks like.

R
Retrievy Team
Read Now
Your AD Has 200 Service Accounts. How Many Are Ghosts?
Identity Security
8 min read

Your AD Has 200 Service Accounts. How Many Are Ghosts?

Most AD environments have dozens of forgotten service accounts carrying admin-level privileges. Learn how ghost service accounts become breach vectors, and how to find them before attackers do.

N
Ney Gelbcke Junior
Read Now