Philippe Lagadec

https://security-list.js.org

https://techcommunity.microsoft.com/t5/storage-at-microsoft/new-cisa-stop-ransomware-guide/ba-p/3960485 https://www.cisa.gov/resources-tools/resources/stopransomware-guide

https://cyber.gouv.fr/publications/recommandations-pour-ladministration-securisee-des-si-reposant-sur-ad

ANSSI launched a new website, so all links will surely need to be updated. new FR link to hardening guides: https://cyber.gouv.fr/publications?field_type_de_publication_target_id%5B934%5D=934 new EN link to hardening guides: https://cyber.gouv.fr/en/publications?field_type_de_publication_target_id%5B934%5D=934

https://github.com/HotCakeX/Harden-Windows-Security/wiki/Comparison-of-security-benchmarks

https://markmap.js.org/repl#?d=github%3Adecalage2%2Fawesome-security-hardening%40master%3AREADME.md https://markmap.js.org/

https://www.cisa.gov/news-events/alerts/2023/06/28/cisa-and-nsa-release-joint-guidance-defending-continuous-integrationcontinuous-delivery-cicd https://media.defense.gov/2023/Jun/28/2003249466/-1/-1/0/CSI_DEFENDING_CI_CD_ENVIRONMENTS.PDF

See if there are relevant hardening guides: https://www.sstic.org/2023/presentation/analyse_securite_netbackup/

https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/best-practices-for-securing-active-directory From https://mobile.twitter.com/reprise_99/status/1640305240712028165

https://twitter.com/malmoeb/status/1632634227178061825 Actual reference: https://specterops.io/wp-content/uploads/sites/3/2022/06/Certified_Pre-Owned.pdf Certified Pre-Owned Abusing Active Directory Certificate Services page 97, section Defensive Guidance See also other AD hardening tips: 2) https://twitter.com/malmoeb/status/1632981980395470850 3) https://twitter.com/malmoeb/status/1633346261876187136 4) https://twitter.com/malmoeb/status/1633719085446955012 5) https://twitter.com/malmoeb/status/1634072279125508097