We are the experts in Active Directory, Entra ID, and Identity security. Find out more about our services at https://nitter.gq/t.co/3kWA6f7dh1.
Washington, DC
Joined February 2016
- Tweets1.6K
- Following132
- Followers5.1K
- Likes554
Join us in 30 minutes for a REstream of our previous Happy Hour episode:
11 am PT / 2 pm ET
💥 Hacking Demystified, featuring @HackingDave
It's a replay of our previous livestream, but we'll be commenting LIVE on Twitch, so join the conversation at spotify.trimarcsecurity.com/…
Through dragon’s fire, a spark ignites,
A Vision burns through endless nights.
To guard AD realms, to keep them clear,
A more secure enterprise for this New Year.
Thank you for joining us during this #30DaysOfVision adventure!
Happy New Year from the Trimarc crew 🐉
ALT An AI-generated image of a hoodie-clad dragon using its fire breath to light fireworks. The old Trimarc logo is in the eye of the dragon, and the new Trimarc logo is a patch on the dragon's backpack strap. In the upper left is a sign that says "Happy New Year." There are fireworks in the background.
1
4
576
Trimarc Vision is a powerful security posture analysis product that provides visibility into the most important security components of Active Directory.
With dozens to hundreds of thousands of AD users often spread across multiple domains and forests, maintaining a strong security posture can be a daunting task. This is especially true when performing risk calculations, mergers and acquisitions, or conducting remediation planning.
But with the Trimarc Vision dashboards, organizations can now have a unified view of their AD security, real-world based risk scoring, and prioritized remediation guidance - all in one powerful tool that’s quick to deploy and simple to implement.
Early Access pricing wraps up at the end of January, so get a demo soon to see Trimarc Vision in action. trimarcvision.com/
#30DaysOfVision #ADsecurity #EnterpriseSecurity
1
4
689
Often, some of the most enlightening parts of a webcast or livestream are the questions that audience members ask at the end of a presentation.
The questions our viewers asked at the end of our Trimarc Vision webcast were so good that we decided to break them out into a separate Q&A video.
Questions included:
🔸 Are there plans to support Hybrid environments?
🔸 How are Service Accounts identified?
🔸 What AD level is required for Trimarc Vision to interrogate it?
🔸 How do you determine how the data was gathered?
🔸 Can alerts be generated if new vulnerabilities are generated?
🔸 Do you plan to add auto sync?
🔸 Is Trimarc Vision a real-time view?
🔸 How are risk scores calculated?
🔸 Do you offer an MSP license?
🔸 Does Trimarc Vision have an API/SIEM integration?
🔸 Can Trimarc Vision show AD health over time?
🔸 How does Trimarc Vision handle data security?
🔸 How do I sign up for Early Access to Trimarc Vision?*
Check out the video to hear responses from our founder and CTO, Sean Metcalf (@PyroTek3): youtu.be/nR1fTfSjcmY?si=LgKk…
(*if you're considering signing up for Trimarc Vision, reach out soon, as Early Access pricing wraps up at the end of January)
#30DaysOfVision - Day 27 – Agents of Chaos.
Any analyst or security engineer who has been around long enough has an intimate relationship with agent fatigue. It’s not enough to have to worry about the processing needs of an agent for every product, but also the greedy permission models that come with them.
Too many product agents need the keys to your kingdom to be able to run. It’s enough already.
We practice & preach the least privileged model. The Trimarc Vision agent does NOT need to be installed on a DC, nor does it need admin level access. We’re a guest in your house; you’ll barely know we’re here, and we’ll help with the dishes. 💗
Learn how Trimarc Vision can help your security team monitor #ActiveDirectory more efficiently in this video from our founder and CTO, Sean Metcalf (@PyroTek3): youtu.be/oXlTU7ibfWo?si=73Lh…
This is Jim Sykora (@JimSycurity), Trimarc Security Consultant and author of an awesomesauce white paper, "Owner or Pwned.” Jim smashes a year’s worth of research into 54 pages, complete with code snips, screenshots, and of course, Kenny Loggins references.
Read the white paper to learn about discovering and remediating AD object ownership issues: bit.ly/TWOOP
And since it’s Day 26 of #30DaysOfVision, we’d be remiss if we didn’t mention that Trimarc Vision checks for the ability to take ownership of privileged objects in #ActiveDirectory. Why is this important? Well, the default behavior in Active Directory allows the Owner of an AD Object to fully control that Object.
Do you know who owns objects in your AD Forest? Do you know which AD Object Owners could compromise your AD Forest? Do you know who could own your AD Objects and who could Pwn your AD?
Get instant answers to these and more questions with the dashboards in Trimarc Vision for Active Directory. Get a demo at trimarcvision.com/
#30DaysOfVision - Day 25 - Criticality.
Let's dig a little more into Trimarc Vision's Findings. Obvious question: how does Trimarc define levels of criticality? We define them in Vision as we always have for our assessments like our Active Directory Security Assessment.
The bar for Critical: One step away from total compromise of a domain or forest. Like this tasty morsel right here.
For more information on Trimarc Vision for #ActiveDirectory and all of Trimarc's services, visit trimarcsecurity.com/
💬 "Oh, there has to be something in the stocking that makes a noise. Otherwise, what is 4:30 AM for?" ~Death [in Hogfather, by Terry Pratchett]
We hope your holidays are warm, magical, and chock-full of your preferred level of festive noise.
#30DaysOfVision
ALT An AI-generated image of a dragon wearing a hoodie in front of a fireplace with stockings hung on the mantle. The old Trimarc logo is in the eye of the dragon, and the new Trimarc logo is on one of the stockings. Text in a half circle above the flames in the fireplace says "Happy Holidays"
4
419
#30DaysOfVision - Day 23 - Environment Risk Score (ERS)
Whether it’s last-minute shopping, wrapping, or moving that dang Elf to a new place on the shelf, sometimes you just don't have the time for a deep dive to assess issues in your #ActiveDirectory environment.
You need to see where the problem is and start focusing your efforts on remediation.
Trimarc Vision's ERS is based on the severity of each individual Finding it uncovers. That way, you can fix what needs fixin’ in your AD environment and get right back to dreideling, wassailing, and decking the halls.
trimarcvision.com/
It's Day 22 of 30 Days of Vision... prepare to be wowed by the AD insights and skillful sleight of hand of @TrimarcSecurity Senior Security Consultant, Brandon Colley (@TechBrandon).
You may have seen his talk on "Winning the Game of Active Directory" during DEF CON 32, but did you know that Brandon is also a whiz at performing card tricks? Last week, Brandon razzled and dazzled viewers during the Cybersecurity Cares streamathon and raised money for a great cause: @BeckysFund, a nonprofit on a mission to end domestic violence.
Today you can choose your VISION adventure... view Brandon's talk from DEF CON 32, or check out his card trick wizardry from the Cybersecurity Cares streamathon (or both!)
🎤 Winning the Game of Active Directory talk at @defcon 32:
youtu.be/M-2d3sM3I2o?si=-uPU…
🎩 Brandon the Magnificent on the @Cybersec_Cares Streamathon:
youtube.com/live/4648dYf8c5k…
#30DaysOfVision
ALT Top section of the image is a screenshot from Brandon Colley's presentation on "Winning the Game of Active Directory" during DEF CON 32. Bottom section of the image is a screenshot of a video where Brandon is doing card tricks. Brandon is holding up the Jack of Hearts card.
#30DaysOfVision - Day 21 - Collectibles.
We are an industry of proud nerds. Star Trek, Star Wars, Battlestar Galactica… collecting things IS our thing. 🤓 Trimarc Vision was built by those same nerds, so we gave you Collections of Forests.
A little harder to fit on a shelf, but it sure does look pretty in the Vision Dashboard.
Collections enable easy grouping/analysis of forests in your environment, easily accessible within the Trimarc Vision UI.
For more in-depth clicking around, check out TrimarcVision.com
2
452
#30DaysOfVision - Day 20 - Mergers & Acquisitions + Comparing Forests.
Wondering how one of your existing forests measures up to another? Have questions about a potential new forest addition during an M&A? Trimarc Vision for #ActiveDirectory can compare forests, displaying info like number and category of findings.
Trimarc Vision is available at Early Access pricing until the end of January, so visit TrimarcVision.com to learn more and schedule a customized demo.
It's Day 19 of 30 Days Of Vision, and it's time for the final Trimarc Dragon's Breath newsletter of 2024, so get a good whiff. 🐉
Deck the domains, jingle those GPOs, and enjoy a plethora of AD security content, a great deal on Trimarc Vision, free security tools, and insights from Jake Hildreth, @Bandrel, Ram Jeyaraman, @Cyberagent101, @AugustVansickl2, Sarah Scott, @PyroTek3, James Davison, and @PhillipWylie of @thehackermaker.
linkedin.com/pulse/december-…
#30DaysOfVision #ADsecurity #EnterpriseSecurity
ALT A dragon wearing a red and black hoodie in front of a laptop screen. There is a festive holiday scene behind the dragon, with ornaments, gifts, and decorated trees. In the upper left corner is the Triamrc logo, and wording at the bottom reads "Dragon's Breath; Trimarc Security Newsletter - December 2024"
#30DaysOfVision, Day 18: Vintage Passwords
Cars can be classified as Classic/Antique after the 10-year mark. So can KRBTGT passwords. Trimarc Vision's Remediation Planner not only describes HOW to fix issues, it gives you the PowerShell cmdlets to DO it.
spotify.trimarcsecurity.com/…
312
We've shown you the Trimarc Vision UI and talked about what it does. Now let's talk about the most important thing… WHY?
Why did a services company decide to build a product?
The "why" is simple. Rather than product for product’s sake, we made Trimarc Vision because we simply could not stand the thought of it not existing. We saw a problem we could fix, based on the culmination of hundreds of AD assessments of the Fortune 50 and beyond.
Trimarc Vision is as much a passion project as it is a security product.
And the reason you're seeing 30 straight days of Vision-inspired posts is because we’re excited for you to see it and to start using it to secure your enterprise. That's been our mission for a decade.
⏲️ Early Access pricing for Trimarc Vision wraps up at the end of January, so if you’re looking for an instant heads-up display analyzing your #ActiveDirectory security posture, check out trimarcvision.com/
Day 17 of #30DaysOfVision #ADsecurity
ALT Trimarc Vision logo, looks like the eye of a dragon, and the words "TRIMARC" and "VISION" are in all caps. The logo appears to be jumping out from the screen.
Day 16 of 30 Days of Vision: "The woods are lovely, dark and deep. But I have promises to keep, and miles to go before I convince people to audit their AD Admin group membership." ~ Robert Frost, 1776
We designed Trimarc Vision from its inception to scale so we can support a wide variety of environments.
Got just a single #ActiveDirectory forest? We have you covered. Having to firefight in hundreds of AD forests? You can view Findings and actionable recommendations INSTANTLY in the Trimarc Vision dashboards.
Check out Trimarc Vision for Active Directory at trimarcvision.com/ before Early Access pricing wraps up at the end of January.
#30DaysOfVision #ADsecurity #InaccurateQuotes
1
6
986
As poet and lyricist Jon Bon Jovi proclaims, “Woooah, we’re halfway there.”
Woooah, it’s officially Day 15 of our #30DaysOfVision escapades, and today we're talking about MERGERS & ACQUISITIONS.
We've all got secret shames hidden within our respective #ActiveDirectory environments. Things we'd be embarrassed to admit at the holiday dinner table, or AD sins we have no idea about and are afraid to even look into lest we tempt the PagerDuty gods. 📟
So, one can only imagine what lurks in the dark and deep of a stranger's AD forest.
One of the core powers of our Trimarc Vision dashboards is that they give you a detailed view into the abyss during Mergers and Acquisitions.
When it’s time to combine environments during M&A, don’t just be Livin’ On a Prayer; set yourself up for success with Trimarc Vision, and you’ll be lying on a Bed of Roses (thorns pre-removed, of course).
Learn more about Trimarc Vision at trimarcvision.com/
#ADsecurity #MergersAndAcquisitions
1
411
30 Days of Vision: Day 14 - Level of Effort 💪
Even on Sunday? Well, it's Monday in Australia, Bangladesh, and Fiji so yes, absolutely. Looking up world clocks is a very low level of effort. We like that. So, we baked that same minimal guesswork into Trimarc Vision for Active Directory.
Look, Operations is hard. Nobody can tell you something will take exactly X time to fix. Anyone who doesn't eat where you eat that tries to start a sentence with "Oh, it's just..." is doing you a disservice.
For every Finding in the Trimarc Vision dashboards, we're going to give you as much information as we can to help you accurately gauge the level of effort remediating that Finding will take in YOUR particular environment.
⏲️ Early Access pricing for Trimarc Vision is ending soon, so if you’re looking for an instant heads-up display analyzing your #ActiveDirectory security posture, check out trimarcvision.com/
#30DaysOfVision #ADsecurity #EnterpriseSecurity
ALT Screenshot of a Trimarc Vision dashboard displaying the description for a Critical severity in the Finding category of AD Administration. Title reads "Domain Account with SPN and a Password Older Than 3 Years". Below is a description of what that Finding means, the Data associated with the Finding such as Account, Password Last Set, Last Logon Date, and SPN List. At the bottom is Recommendations for remediation.
2
456
We’re up to Day 13 of our 30 Days of Vision (yes, even on weekends… that’s how this shtick works).
All Findings in Trimarc Vision for #ActiveDirectory are scored by their severity level. A quick click on the Vision dashboard sorts all Findings by their scoring.
Get a demo from our technical team and see Trimarc Vision in action: trimarcvision.com/
#30DaysOfVision #ADsecurity
3
543
It’s Day 12 of #30DaysOfVision! To quote painter/philosopher/visionary Bob Ross, “We don’t make mistakes, we have happy accidents.” 🌳
Welp, last Friday, we had a “happy accident” and got our wires crossed about which REstream would be REstreaming.
We had planned to have a rerun of @jeffmcjunkin’s “Destroying Technical Debt” episode, but viewers instead got to enjoy the happy accident of viewing a REstream of “Buggin’ Out” with @Bugcrowd founder, @caseyjohnellis. Whoops! And you’re welcome (it’s a good one).
Catch the REestream* of Jeff’s episode TODAY on Twitch (twitch.tv/TrimarcSecurity) at 11 am PT / 2 pm ET – we promise!
* REstream = A rerun of a previous livestream, but we’ll be live on Twitch to chat with any viewers during the episode.
Join us at twitch.tv/TrimarcSecurity