{"id":43071,"date":"2021-09-23T21:22:16","date_gmt":"2021-09-23T21:22:16","guid":{"rendered":"https:\/\/www.darkreading.com\/edge-articles\/primer-microsoft-active-directory-security-for-ad-admins"},"modified":"2021-09-23T21:22:16","modified_gmt":"2021-09-23T21:22:16","slug":"primer-microsoft-active-directory-security-for-ad-admins","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/primer-microsoft-active-directory-security-for-ad-admins\/","title":{"rendered":"Primer: Microsoft Active Directory Security for AD Admins"},"content":{"rendered":"
<\/div>\n

Microsoft Active Directory (AD) is the most common directory services product in the world, used by most of the Fortune 1000 for identity and access management. Unfortunately, it can also be a nightmare to secure. In addition, its administrators are often unaware of the security ramifications of their actions \u2013 not that security is necessarily their responsibility \u2013 or how they can harden their environments.  <\/p>\n

This article will explore some of the widespread AD security issues admins face and explain what they can do to prevent or mitigate them.<\/p>\n

Understanding AD Attack Paths
<\/strong>Nearly all AD environments are vulnerable to a powerful, difficult-to-detect technique called attack paths. You may have heard them called \u201cidentity snowball attacks<\/a>\u201d because they first compromise a host and then use the privileges of users logged into that host to launch attacks against other hosts. Attackers move from machine to machine in this way until they reach their targets (usually a domain controller) and complete their objectives, whether that\u2019s stealing sensitive data, deploying malware, or something else. <\/p>\n

The average AD environment has hundreds or thousands of attack paths, and they\u2019re usually an \u201cunknown unknown,\u201d where admins don\u2019t understand the problem or even realize they have one. But this isn\u2019t a criticism of AD admins \u2013 the features that make AD useful for enterprises are the same ones that make it attractive to attackers and difficult to defend. Getting control of an AD environment will almost always give attackers the access they need to reach their objectives, either through taking direct control of endpoints or using AD to validate themselves as a user with access to the system they need. <\/p>\n

Since AD is widely used among major enterprises, attackers can reuse the same techniques against multiple targets. And because hacker tools used to progress along an attack path (like Mimikatz and Responder) abuse features built into Windows and AD rather than software exploits, it\u2019s difficult for defenders to detect them. <\/p>\n

The size and scope of AD also make it difficult to secure. Enterprises can easily have thousands of attack paths, and they constantly change as new users are added or removed and groups and permissions shift. Mapping all of them is difficult, and closing them all is practically impossible. While individual attack paths can be closed by altering a particular permission or security group membership, removing one accomplishes very little. Attackers has plenty of alternate routes to the same objective. Think of AD as Google Maps, with an attacker starting in Los Angeles and trying to get to Washington, DC. There are thousands of specific routes they might take, so closing one highway won\u2019t stop them from getting there. <\/p>\n

Making Active Directory More Secure
<\/strong>So do we just throw up our hands in the face of this overwhelming problem? Of course not. There are many things AD admins can do to help make their environments more secure that don\u2019t require detailed security expertise. Two of the most important steps are gaining better visibility into AD and understanding nested security groups. <\/p>\n

AD makes it very difficult to audit user permissions. Windows will only report which principals<\/a> have a direct \u201cadmin rights\u201d relationship to a computer or control of an object. A principal could be an individual or a group, and there\u2019s no way to \u201cunroll\u201d these groups in AD \u2013 the admin must go through a separate process to view group membership. If there\u2019s another group nested in the first one, the admin will have to repeat the process. <\/p>\n

This makes auditing permissions clunky and time-consuming, to the point that it prevents most AD admins from truly understanding their own environments. Using third-party tools or scripts for more insight into which users have which permissions and tracking nested security groups is a great starting point to better AD security. A free and open source AD mapping tool called BloodHound<\/a>
\nhas this functionality (I am a co-creator of it), and other tools like PingCastle<\/a>
\nare also helpful. <\/p>\n

Other useful steps toward better AD security include defining an organization’s Tier Zero assets (this normally includes AD domain admins, domain controllers, PKI, and anyone with access to high-value systems specific to the organization in question) and developing a method to measure its risk exposure. Also, think twice when giving new users permissions \u2013 while it\u2019s tempting to give them access to everything they might need, overprivileged users create more attack paths. <\/p>\n

To learn more about attack paths and AD security, I recommend Microsoft’s Securing Privileged Access Documentation<\/a> and the website ADSecurity.org<\/a>. Whether they’ve known it or not, defenders have been plagued by attack paths for decades, so understanding them is the first step towards reducing risk for the entire enterprise.<\/p>\n

Read More HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Nearly all AD environments are vulnerable to identity attack paths — a powerful, widespread, and difficult-to-detect attack technique. But we didn’t say impossible. Here’s how admins can stop them.Read More HERE<\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[151],"tags":[],"class_list":["post-43071","post","type-post","status-publish","format-standard","hentry","category-darkreading-ti"],"yoast_head":"\nPrimer: Microsoft Active Directory Security for AD Admins 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/primer-microsoft-active-directory-security-for-ad-admins\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Primer: Microsoft Active Directory Security for AD Admins 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/primer-microsoft-active-directory-security-for-ad-admins\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2021-09-23T21:22:16+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/bltfae40bbcfb3822e5\/614ce477b03377257b94d904\/Active-Directory-Alamy.jpg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/primer-microsoft-active-directory-security-for-ad-admins\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/primer-microsoft-active-directory-security-for-ad-admins\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Primer: Microsoft Active Directory Security for AD Admins\",\"datePublished\":\"2021-09-23T21:22:16+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/primer-microsoft-active-directory-security-for-ad-admins\\\/\"},\"wordCount\":811,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/primer-microsoft-active-directory-security-for-ad-admins\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/eu-images.contentstack.com\\\/v3\\\/assets\\\/blt66983808af36a8ef\\\/bltfae40bbcfb3822e5\\\/614ce477b03377257b94d904\\\/Active-Directory-Alamy.jpg\",\"articleSection\":[\"DarkReading |TI\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/primer-microsoft-active-directory-security-for-ad-admins\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/primer-microsoft-active-directory-security-for-ad-admins\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/primer-microsoft-active-directory-security-for-ad-admins\\\/\",\"name\":\"Primer: Microsoft Active Directory Security for AD Admins 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/primer-microsoft-active-directory-security-for-ad-admins\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/primer-microsoft-active-directory-security-for-ad-admins\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/eu-images.contentstack.com\\\/v3\\\/assets\\\/blt66983808af36a8ef\\\/bltfae40bbcfb3822e5\\\/614ce477b03377257b94d904\\\/Active-Directory-Alamy.jpg\",\"datePublished\":\"2021-09-23T21:22:16+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/primer-microsoft-active-directory-security-for-ad-admins\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/primer-microsoft-active-directory-security-for-ad-admins\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/primer-microsoft-active-directory-security-for-ad-admins\\\/#primaryimage\",\"url\":\"https:\\\/\\\/eu-images.contentstack.com\\\/v3\\\/assets\\\/blt66983808af36a8ef\\\/bltfae40bbcfb3822e5\\\/614ce477b03377257b94d904\\\/Active-Directory-Alamy.jpg\",\"contentUrl\":\"https:\\\/\\\/eu-images.contentstack.com\\\/v3\\\/assets\\\/blt66983808af36a8ef\\\/bltfae40bbcfb3822e5\\\/614ce477b03377257b94d904\\\/Active-Directory-Alamy.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/primer-microsoft-active-directory-security-for-ad-admins\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Primer: Microsoft Active Directory Security for AD Admins\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Primer: Microsoft Active Directory Security for AD Admins 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/primer-microsoft-active-directory-security-for-ad-admins\/","og_locale":"en_US","og_type":"article","og_title":"Primer: Microsoft Active Directory Security for AD Admins 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/primer-microsoft-active-directory-security-for-ad-admins\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2021-09-23T21:22:16+00:00","og_image":[{"url":"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/bltfae40bbcfb3822e5\/614ce477b03377257b94d904\/Active-Directory-Alamy.jpg","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/primer-microsoft-active-directory-security-for-ad-admins\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/primer-microsoft-active-directory-security-for-ad-admins\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Primer: Microsoft Active Directory Security for AD Admins","datePublished":"2021-09-23T21:22:16+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/primer-microsoft-active-directory-security-for-ad-admins\/"},"wordCount":811,"commentCount":0,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/primer-microsoft-active-directory-security-for-ad-admins\/#primaryimage"},"thumbnailUrl":"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/bltfae40bbcfb3822e5\/614ce477b03377257b94d904\/Active-Directory-Alamy.jpg","articleSection":["DarkReading |TI"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.threatshub.org\/blog\/primer-microsoft-active-directory-security-for-ad-admins\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/primer-microsoft-active-directory-security-for-ad-admins\/","url":"https:\/\/www.threatshub.org\/blog\/primer-microsoft-active-directory-security-for-ad-admins\/","name":"Primer: Microsoft Active Directory Security for AD Admins 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/primer-microsoft-active-directory-security-for-ad-admins\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/primer-microsoft-active-directory-security-for-ad-admins\/#primaryimage"},"thumbnailUrl":"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/bltfae40bbcfb3822e5\/614ce477b03377257b94d904\/Active-Directory-Alamy.jpg","datePublished":"2021-09-23T21:22:16+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/primer-microsoft-active-directory-security-for-ad-admins\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/primer-microsoft-active-directory-security-for-ad-admins\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/primer-microsoft-active-directory-security-for-ad-admins\/#primaryimage","url":"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/bltfae40bbcfb3822e5\/614ce477b03377257b94d904\/Active-Directory-Alamy.jpg","contentUrl":"https:\/\/eu-images.contentstack.com\/v3\/assets\/blt66983808af36a8ef\/bltfae40bbcfb3822e5\/614ce477b03377257b94d904\/Active-Directory-Alamy.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/primer-microsoft-active-directory-security-for-ad-admins\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Primer: Microsoft Active Directory Security for AD Admins"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/43071","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=43071"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/43071\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=43071"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=43071"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=43071"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}