Reply to post: Additional admins

Hot glare of the spotlight doesn’t slow BlackByte ransomware gang

Anonymous Coward
Anonymous Coward

Additional admins

"and make themselves persistent in the network by adding additional admin accounts"

It's a trivial matter to create a small script that will return the number of members in a domain admins group. If the number changes without prior knowledge or agreement, send an alert to someone who needs to know.

It's not a protection or a defence but anything that shortens the time between intruders gaining access and that intrusion being discovered has to be a good thing.

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Biting the hand that feeds IT © 1998–2022