Main Menu 2 Solutions Services Partners Insights Company Contact Up-to-date information and research on red and blue team security capabilities, objective tools analysis, new research and step-by-step solutions. The Source Zero platform is a community of Optiv’s skilled individuals doing research and sharing their expertise. The Source Zero Tools are resources that provide actionable support and demonstrations around research initiatives. Search Terms Type - Any - Blog Tool Video Team - Any - Red Blue Purple/No Team Sort By Latest Oldest Apply Filters Image Automated Endpoint Evaluations – Part 3 Creating Virtual Machines and Allowed IP Address Assignment as part of a Power Automate Cloud Flow November 19, 2021 This post discusses the creation of Azure test virtual machines and assigning an allowed IP address as part of a Power Automate cloud flow. See Details BLOG Image Automated Endpoint Evaluations – Part 2 October 07, 2021 This video discusses Optiv's creation of Azure Resource Groups and Security Groups as part of a Power Automate Cloud Flow. See Details BLOG Image Microsoft 365 OAuth Device Code Flow and Phishing August 17, 2021 We leveraged Microsoft’s OAuth authorization flow for a phishing attack. Here’s step-by-step guidance on how to conduct it for security assessment. See Details BLOG Image Automated Endpoint Evaluations – Part 1 August 12, 2021 Optiv researcher Dan Kiraly examines automated endpoint evaluations in the first technical video of a series. See Details BLOG Image PetitPotam & Active Directory Certificate Services August 10, 2021 Multiple CVEs involving Active Directory Certificate Services and a new NTLM relay attack can be chained to compromise an Active Directory domain. See Details BLOG Image Go365: Office 365 Password Spraying Tool June 17, 2021 Go365 performs user enumeration and password spraying attacks on organizations that use Office 365. See Details BLOG Image Kubernetes Attack Surface June 17, 2021 Optiv highlights the attack strategy of using forged Kerberos tickets to compromise a domain, and provides ways to defend against it. See Details BLOG Image Kerberos - A Domains Achille's Heel June 02, 2021 Optiv highlights the attack strategy of using forged Kerberos tickets to compromise a domain, and provides ways to defend against it. See Details BLOG Image Breaking the (WDAPT) Rules with COM May 12, 2021 This article explores gaps that allow for the undetected execution of code on systems protected by Microsoft Defender Advanced Threat Protection. See Details BLOG Image Credential Theft Prevention With a Palo Alto Networks NGFW April 23, 2021 We encourage clients to understand and adopt Palo Alto’s powerful credential theft prevention feature. See Details BLOG Image Accelerating Vulnerability Remediation with Automation April 12, 2021 We reduced mean time to remediate by accelerating the processes from vulnerability discovery to the deployment of a corrective system update. See Details BLOG Image Firefox Addons For Application Security Testing March 24, 2021 Firefox’s appsec add-ons make it a useful tool for new pen testers who can’t afford professional tools. See Details BLOG Pagination Current page 1 Page 2 Page 3 Page 4 Page 5 Next page Next › Last page Last » Introducing Source Zero Our new technical cybersecurity thought leadership resource, Source Zero, focuses on red and blue team security capabilities, objective tools analysis, and more. Footer menu SERVICES PARTNERS INSIGHTS ABOUT US CAREERS CLIENT PORTAL Secure greatness™ Home | Contact | Cookie Policy | Privacy Policy | Terms of Use | Sitemap The content provided is for informational purposes only. Links to third party sites are provided for your convenience and do not constitute an endorsement. These sites may not have the same privacy, security or accessibility standards. © 2020 – 2021. Optiv Security Inc. All Rights Reserved. This Website Uses Cookies This site uses cookies to store information on your computer. You may enable or disable certain cookies by clicking “Show Details” or as further described in our Cookie Policy.Please read our Cookie Policy to learn more. Show Details Accept