See the latest by Hope Walker
Going for Broke(ring) – Offensive Walkthrough for Nested App Authentication
TL;DR: Microsoft uses nested app authentication (NAA) for many applications. Access and refresh tokens for select...
By: Hope Walker
Aug 13, 2025 • 19 min read
Read Post
How Privileged Identity Management Affects Conditional Access Policies
Introduction When administrators use directory roles (aka Entra ID roles) when configuring Conditional Access Policies (CAPs),...
By: Hope Walker
Jun 20, 2024 • 11 min read
Read Post
This post is a follow-up to my previous post on manual LDAP querying. I would highly...
By: Hope Walker
May 2, 2024 • 20 min read
Read Post
An Introduction to Manual Active Directory Querying with Dsquery and Ldapsearch
Introduction Let’s be honest, BloodHound and PowerView are objectively better tools for querying, enumerating, and investigating Active Directory (AD). They...