Combining AD Honey Pot Accounts with Canaries to Detect Password Sprays and Kerberoasting for free!

Similar Tracks
Monitoring Sensitive Windows Commands via CanaryTokens - Deploying Registry Entries via Group Policy
IppSec
Using Sysmon to Block Unwanted Files and Send Notifications to Slack via Scheduled Task Event Filter
IppSec