Discover and read the best of Twitter Threads about #userprivilegemanagement

Most recents (1)

@DTCERT

Here are some lessons learned from our past engagements; see it as an easy checklist on what not to do. #LessonsLearned ✅

1) MFA (Multi-Factor-Authentication) being not fully implemented or non-existent at all
While some attackers steal MFA tokens, it is rare! 📱 #MFA

2) Bad user privilege management
Does HR really need a domain admin? 👑 #UserPrivilegeManagement