• SQL Event ID 18456: Login failed for user Reason: Token-based server access validation failed

    If you get event ID 18456 with Source MSSQLSERVER in your application and SQL logs with the verbiage of "Login failed for user 'domain\service.account.you.use'. Reason: Token-based server access validation failed with an infrastructure error...
  • Event ID 1057 - The Terminal Server has failed to create a new self signed certificate

    If you receive Event ID 1057 - "The Terminal Server has failed to create a new self signed certificate to be used for Terminal Server authentication on SSL connections. The relevant status code was Key not valid for use in specified state" from...
  • Mitigating the Risk of Lateral Movement

    In the news recently, you’ve probably read a lot about Pass the Hash. I wanted to talk about another similar security threat that is often outlined in these whitepapers, and what we did at my customer to solve the problem. In just about every...