$ whoami

Seth Hendershot

Systems administrator focused on Active Directory hardening and blue team defense.

$ ls focus/

Tiered admin model, Kerberos and NTLM hardening, LAPS, and GPO security baselines.

Audit policy that captures what matters, and knowing which events to act on.

PowerShell and approval workflows that make identity changes consistent and traceable.

Patching, TLS, SSH, fail2ban, and least-privilege setups for Linux and web servers.

AD automation

An Active Directory management system: approval workflows in front, agents running PowerShell against the directory behind.

cat reach.md →

home lab

A home AD lab used to test hardening changes and detections before recommending them.

cat ad-lab.md →

web app

A live football stats site, updated during games.

cat pylons.md →

secure workflow

A multi-stage account-request and approval app, recently put through a full security hardening pass.

AD tiering and the admin model draft
Separating Tier 0, Tier 1 and Tier 2 admin accounts so a compromised workstation can't hand over the domain.
Kerberos and NTLM hardening draft
Reducing NTLM, tightening Kerberos encryption types, and finding what still depends on legacy auth.
Windows LAPS rollout draft
Unique, rotating local admin passwords with Windows LAPS, and who is allowed to read them.
GPO security baselines draft
Applying and testing a security baseline with Group Policy, and handling the exceptions.
AD auditing and detection draft
Audit policy that actually captures the events that matter, and what to alert on.