Kaitlyn Wimberley | Birdwatching: Canary Users in the Forest | WWHF Purple Team Roundup | Talk 4

Are there canaries in your AD forest? There should be!

Canary users in Active Directory are an effective way to increase visibility of sketchy activity in your environment, and they are quick and simple to set up. (YES, you can do it. I know you can.) And on top of that, they cost nothing to implement.

Something something active defense blah sentence blah.

We’re going to go through how to create believable canary users, monitor them for signs of a …

forest purple purple team team wwhf