home lab

AD Hardening Lab

I keep a home Active Directory lab for testing. I use it to try hardening changes, break things on purpose, and check what the logs show, so I know how a change behaves before suggesting it anywhere real.

# What it does

Runs a small, isolated lab AD domain.
Gives me a safe place to test GPO baselines, Kerberos/NTLM changes, LAPS, and tiering.
Generates the event logs I use for the detection write-ups in the AD & Blue Team section.
[TBD: general lab makeup, kept generic: no host names, IPs or domain names]

# Tech

Windows Server
Active Directory Domain Services
Virtualized lab
PowerShell
[TBD: log / SIEM tooling, if any]

# Security work

[TBD: hardening changes applied so far, with before/after]
[TBD: audit policy configuration]
[TBD: attack simulations run and what they showed]

# Screenshots

[TBD: add screenshots to /projects/ad-lab/ (scrub hostnames, IPs and personal data first)]

# Links

GitHub: [TBD: repo link]

← all projects