<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>特权提升防御 on 办公AI智能小助手</title>
    <link>https://blog.qife122.com/tags/%E7%89%B9%E6%9D%83%E6%8F%90%E5%8D%87%E9%98%B2%E5%BE%A1/</link>
    <description>Recent content in 特权提升防御 on 办公AI智能小助手</description>
    <generator>Hugo</generator>
    <language>zh-cn</language>
    <copyright>qife</copyright>
    <lastBuildDate>Sun, 07 Sep 2025 13:38:39 +0800</lastBuildDate>
    <atom:link href="https://blog.qife122.com/tags/%E7%89%B9%E6%9D%83%E6%8F%90%E5%8D%87%E9%98%B2%E5%BE%A1/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>启用msDS-KeyCredentialLink变更审计以检测影子凭据攻击</title>
      <link>https://blog.qife122.com/p/%E5%90%AF%E7%94%A8msds-keycredentiallink%E5%8F%98%E6%9B%B4%E5%AE%A1%E8%AE%A1%E4%BB%A5%E6%A3%80%E6%B5%8B%E5%BD%B1%E5%AD%90%E5%87%AD%E6%8D%AE%E6%94%BB%E5%87%BB/</link>
      <pubDate>Sun, 07 Sep 2025 13:38:39 +0800</pubDate>
      <guid>https://blog.qife122.com/p/%E5%90%AF%E7%94%A8msds-keycredentiallink%E5%8F%98%E6%9B%B4%E5%AE%A1%E8%AE%A1%E4%BB%A5%E6%A3%80%E6%B5%8B%E5%BD%B1%E5%AD%90%E5%87%AD%E6%8D%AE%E6%94%BB%E5%87%BB/</guid>
      <description>&lt;h1 id=&#34;启用msds-keycredentiallink变更审计&#34;&gt;启用msDS-KeyCredentialLink变更审计&lt;/h1&gt;&#xA;&lt;p&gt;标准审计配置不会对msDS-KeyCredentialLink属性的变更进行审计/记录。这给调查工作带来巨大困难，直到信息安全合作伙伴TrustedSec提供了关键解决方案。&lt;/p&gt;</description>
    </item>
  </channel>
</rss>
