The Golden Ticket: Kerberos’ Forbidden Pass
A Golden Ticket attack lets an attacker forge Kerberos tickets and impersonate any user in an Active Directory domain. Learn how the attack works and the concrete steps you can take to defend against it.
read more
Resetting AD KRBTGT Password
A practical guide to resetting the krbtgt account password in Active Directory, including considerations for external trusts and the Microsoft-provided reset script.
read more
IPv4 Kernel Stack Optimizations
A practical walkthrough for tuning Linux TCP/IP stack parameters, from selecting a congestion control algorithm to applying sysctl settings for high-throughput workloads.
read more
Dump Kafka Atlas Topic to Review Messages
A quick walkthrough for dumping the ATLAS_HOOK Kafka topic to inspect Atlas hook messages locally, including Kerberos authentication setup and consumer lag checks.
read more
Hive Bundle Logs
Hive bundle logs in a cloud data warehouse are stored under a predictable S3 path. Knowing where to look saves time when troubleshooting query performance or diagnosing failed jobs.
read more
Deploy CFSSL CA Server
A step-by-step guide to deploying a CFSSL-backed certificate authority with PostgreSQL storage, OCSP responder, and CRL distribution. Covers installation, CA initialization, service configuration, and Nginx reverse proxy setup.
read more