Notices by Jake Hildreth (acorn) :blacker_heart_outline: (horse@infosec.exchange)

@Lana @pseudonym

> You can still be a good person without being a nice person. You don't owe your oppressor kindness.

That part!

Hello, friends!

It's now 2025 which is officially the future. And in the future, your open-source AD CS auditing tools should provide risk ratings for their findings. So... that's what you're getting in Locksmith 2025.1.1 - just released today!

Every issue Locksmith finds now includes a risk score which maps to a risk level. These risks should help you decide which issues to tackle first. And we've added some new interactivity to make sure the remediations are more customized to your AD CS situation.

Additionally, @samerde is now the official Locksmith CI/CD wizard! His first task as wizard was to automate the creation of an MkDocs site for Locksmith. Thanks, Sam!

For full details, head to the release page: https://github.com/TrimarcJake/Locksmith/releases/tag/v2025.1.1

And if you want to get started using these new features now, you can install Locksmith from the PowerShell gallery right now:

Install-Module -Name Locksmith -Scope CurrentUser -Force

@Sempf like the last two minutes of regulation or where they killed and ate the mascot?

@JessTheUnstill I have drilled into my daughter’s head “being brave means being afraid but doing it anyway.”

@da_667 au jus packet, ranch packet, a stick of butter, half a jar of pepperoncinis + half a jar of juice

@Blueteamsherpa ask @hacks4pancakes ?

@sillyCoelophysis @alina @dnsprincess this is the correct answer

@Chris_vonW @SteveSyfuhs @malwaretech Same. But it's something!

@Chris_vonW @SteveSyfuhs @malwaretech http://www.cjwdev.com/Software/MSAGUI/Info.html

Live right now @ https://twitch.tv/TrimarcSecurity w/Ray [REDACTED]

@dnsprincess I am also a parent.

@franklesniak And does it support templates yet?

Trimarc Twitch Happy Hour is live now talking about spoooooooooooky security horror stories. Come join a cast of characters @ https://twitch.tv/TrimarcSecurity

The hardest part of any task is to start it.
The second hardest part is to finish it.
The middle stuff is cake.

• @JimSycurity

Trimarc Twitch Happy Hour Going Live Now from WWHF! https://twitch.tv/TrimarcSecurity

@deepthoughts10 @merill I agree with you. Tracking is more difficult with shared accounts.

Funny thing: we regularly see CyberArk in use with individual accounts too with no issues.

Butf if there are shared admin accounts, I bet there's a CA system around somewhere.

@merill Why do shared admin accounts proliferate in CyberArk environments? In my work at Trimarc, it’s almost perfect correlation between shared admins and CA usage.

@investigatorchic Going live NOW!

Today on the Trimarc Twitch Happy Hour:

1. We're talking about burnout and how to recover from it.
2. We have a few guests planned: Stacy D, GTSRT; Cathy Ullman (@investigatorchic); and Rob Dalton!
3. I'm running the show! O_O

https://twitch.tv/TrimarcSecurity

2p ET/11a PT

The moment you realize you forgot to do Wordle yesterday.

Bye bye, 125-ish day streak. :blobcatverysad: