https://nhimg.org/glossary/dhcpv6/2026-10-20T15:17:15+00:00https://nhimg.org/glossary/dns-sd-macos-loobin/2026-10-20T15:17:20+00:00https://nhimg.org/glossary/dnscat2-dns-tunnelling-c2-tool/2026-10-20T15:17:21+00:00https://nhimg.org/glossary/dsniff-network-sniffing-toolkit/2026-10-20T15:17:25+00:00https://nhimg.org/glossary/emerging-threats-open-et-open-ruleset/2026-10-20T15:17:28+00:00https://nhimg.org/glossary/fluxion-evil-twin-wi-fi-attack-tool/2026-10-20T15:17:30+00:00https://nhimg.org/glossary/enhanced-interior-gateway-routing-protocol-eigrp-attacks/2026-10-20T15:17:34+00:00https://nhimg.org/glossary/fragattacks/2026-10-20T15:17:34+00:00https://nhimg.org/glossary/dtls-srtp-dtls-extension-to-establish-keys-for-srtp/2026-10-20T15:17:36+00:00https://nhimg.org/glossary/high-orbit-ion-cannon-hoic/2026-10-20T15:17:40+00:00https://nhimg.org/glossary/ftp-bounce-attack/2026-10-20T15:17:41+00:00https://nhimg.org/glossary/hsrp-and-glbp-hijacking/2026-10-20T15:17:43+00:00https://nhimg.org/glossary/internet-inter-orb-protocol-iiop/2026-10-20T15:17:47+00:00https://nhimg.org/glossary/microsoft-remote-procedure-call-ms-rpc/2026-10-20T15:17:54+00:00https://nhimg.org/glossary/nscurl-macos-loobin/2026-10-20T15:17:55+00:00https://nhimg.org/glossary/passpoint-hotspot-20/2026-10-20T15:17:56+00:00https://nhimg.org/glossary/portmapper-rpcbind-port-111/2026-10-20T15:17:58+00:00https://nhimg.org/glossary/secure-real-time-transport-protocol-srtp/2026-10-20T15:18:02+00:00https://nhimg.org/glossary/sap-diag-protocol/2026-10-20T15:18:03+00:00https://nhimg.org/glossary/routersploit-embedded-device-exploitation-framework/2026-10-20T15:18:05+00:00https://nhimg.org/glossary/session-traversal-utilities-for-nat-stun/2026-10-20T15:18:07+00:00https://nhimg.org/glossary/smbmap-smb-share-enumeration-tool/2026-10-20T15:18:13+00:00https://nhimg.org/glossary/socketfilterfw-macos-loobin/2026-10-20T15:18:18+00:00https://nhimg.org/glossary/ssh-proxyjump-j/2026-10-20T15:18:19+00:00https://nhimg.org/glossary/ssh-audit-ssh-configuration-auditing-tool/2026-10-20T15:18:22+00:00https://nhimg.org/glossary/traversal-using-relays-around-nat-turn/2026-10-20T15:18:24+00:00https://nhimg.org/glossary/trivial-file-transfer-protocol-tftp/2026-10-20T15:18:28+00:00https://nhimg.org/glossary/wardriving/2026-10-20T15:18:28+00:00https://nhimg.org/glossary/web-application-firewall-waf-rule/2026-10-20T15:18:30+00:00https://nhimg.org/glossary/web-services-dynamic-discovery-ws-discovery-udp-3702/2026-10-20T15:18:32+00:00https://nhimg.org/glossary/wi-fi-easy-connect-device-provisioning-protocol-dpp/2026-10-20T15:18:37+00:00https://nhimg.org/glossary/wifiphisher-rogue-access-point-phishing-tool/2026-10-20T15:18:43+00:00https://nhimg.org/glossary/wifite-automated-wireless-auditing-tool/2026-10-20T15:18:45+00:00https://nhimg.org/glossary/wired-equivalent-privacy-wep/2026-10-20T15:18:47+00:00https://nhimg.org/glossary/google-cloud-service-account-deleter-role-rolesiamserviceaccountdeleter/2026-10-20T15:18:49+00:00https://nhimg.org/glossary/azure-iot-hub-data-contributor-role/2026-10-20T15:18:53+00:00https://nhimg.org/glossary/wireless-penetration-test/2026-10-20T15:18:55+00:00https://nhimg.org/glossary/azure-iot-hub-registry-contributor-role/2026-10-20T15:18:57+00:00https://nhimg.org/glossary/binwalk-firmware-analysis-tool/2026-10-20T15:18:59+00:00https://nhimg.org/glossary/conpot-ics-honeypot/2026-10-20T15:19:04+00:00https://nhimg.org/glossary/data-bus-interception-embedded-devices/2026-10-20T15:19:13+00:00https://nhimg.org/glossary/cryptographic-timing-side-channel-attack/2026-10-20T15:19:15+00:00https://nhimg.org/glossary/ethernetip-port-44818/2026-10-20T15:19:17+00:00https://nhimg.org/glossary/hide-and-seek-iot-botnet/2026-10-20T15:19:20+00:00https://nhimg.org/glossary/inter-integrated-circuit-i2c/2026-10-20T15:19:22+00:00https://nhimg.org/glossary/printer-exploitation-toolkit-pret/2026-10-20T15:19:24+00:00https://nhimg.org/glossary/cryptographic-protocol-side-channel-attack/2026-10-20T15:19:26+00:00https://nhimg.org/glossary/hid-injection-attack/2026-10-20T15:19:28+00:00https://nhimg.org/glossary/azure-dedicated-hsm/2026-10-20T15:19:38+00:00https://nhimg.org/glossary/dual-signature/2026-10-20T15:19:39+00:00https://nhimg.org/glossary/cryptographic-key-storage/2026-10-20T15:19:44+00:00https://nhimg.org/glossary/proxmark3-rfid-research-tool/2026-10-20T15:19:44+00:00https://nhimg.org/glossary/sslyze-tls-configuration-scanner/2026-10-20T15:19:45+00:00https://nhimg.org/glossary/testsslsh-tls-configuration-testing-tool/2026-10-20T15:19:48+00:00https://nhimg.org/glossary/azure-backup-mua-operator-role/2026-10-20T15:19:52+00:00https://nhimg.org/glossary/predictable-cryptographic-key/2026-10-20T15:19:52+00:00https://nhimg.org/glossary/azure-storage-account-backup-contributor-role/2026-10-20T15:20:00+00:00https://nhimg.org/glossary/azure-site-recovery-contributor-role/2026-10-20T15:20:02+00:00https://nhimg.org/glossary/apt14-threat-actor/2026-10-20T15:20:08+00:00https://nhimg.org/glossary/adwind-java-remote-access-trojan/2026-10-20T15:20:15+00:00https://nhimg.org/glossary/adwind-rat-jrat/2026-10-20T15:20:15+00:00https://nhimg.org/glossary/alienvault-ossim-open-source-siem/2026-10-20T15:20:18+00:00https://nhimg.org/glossary/angler-exploit-kit/2026-10-20T15:20:20+00:00https://nhimg.org/glossary/alpha-spider-threat-actor/2026-10-20T15:20:22+00:00https://nhimg.org/glossary/apt15-ke3chang/2026-10-20T15:20:24+00:00https://nhimg.org/glossary/apt2-putter-panda/2026-10-20T15:20:30+00:00https://nhimg.org/glossary/apt20-threat-actor/2026-10-20T15:20:37+00:00https://nhimg.org/glossary/apt22-threat-actor/2026-10-20T15:20:40+00:00https://nhimg.org/glossary/apt24-threat-actor/2026-10-20T15:20:44+00:00https://nhimg.org/glossary/apt21-zhenbao/2026-10-20T15:20:45+00:00https://nhimg.org/glossary/apt26-threat-actor/2026-10-20T15:20:46+00:00https://nhimg.org/glossary/apt23-threat-actor/2026-10-20T15:20:48+00:00https://nhimg.org/glossary/apt4-threat-actor/2026-10-20T15:20:50+00:00https://nhimg.org/glossary/apt45-andariel/2026-10-20T15:20:52+00:00https://nhimg.org/glossary/apt6-threat-actor/2026-10-20T15:20:55+00:00https://nhimg.org/glossary/apt73-ransomware-group/2026-10-20T15:21:06+00:00https://nhimg.org/glossary/aridviper-desert-falcons/2026-10-20T15:21:06+00:00https://nhimg.org/glossary/apt9-threat-actor/2026-10-20T15:21:10+00:00https://nhimg.org/glossary/bamital-botnet/2026-10-20T15:21:12+00:00https://nhimg.org/glossary/belkasoft-evidence-center-forensic-tool/2026-10-20T15:21:12+00:00https://nhimg.org/glossary/avml-linux-memory-acquisition-tool/2026-10-20T15:21:16+00:00https://nhimg.org/glossary/asprox-botnet/2026-10-20T15:21:17+00:00https://nhimg.org/glossary/belkasoft-live-ram-capturer-memory-acquisition-tool/2026-10-20T15:21:19+00:00https://nhimg.org/glossary/cotton-sandstorm-threat-actor/2026-10-20T15:21:31+00:00https://nhimg.org/glossary/chamelgang-threat-actor/2026-10-20T15:21:34+00:00https://nhimg.org/glossary/computer-aided-investigative-environment-caine/2026-10-20T15:21:35+00:00https://nhimg.org/glossary/careto-the-mask/2026-10-20T15:21:38+00:00https://nhimg.org/glossary/blacklock-ransomware-group/2026-10-20T15:21:38+00:00https://nhimg.org/glossary/da-vinci-rcs-hacking-team-spyware/2026-10-20T15:21:39+00:00https://nhimg.org/glossary/cryptochameleon-phishing-threat-actor/2026-10-20T15:21:42+00:00https://nhimg.org/glossary/bulk-extractor-digital-forensics-tool/2026-10-20T15:21:45+00:00https://nhimg.org/glossary/detect-it-easy-die-file-type-and-packer-identifier/2026-10-20T15:21:56+00:00https://nhimg.org/glossary/elknot-linux-ddos-botnet/2026-10-20T15:21:59+00:00https://nhimg.org/glossary/etumbot-apt12-backdoor/2026-10-20T15:22:01+00:00https://nhimg.org/glossary/dnspionage-threat-actor/2026-10-20T15:22:03+00:00https://nhimg.org/glossary/eric-zimmermans-tools-ez-tools/2026-10-20T15:22:04+00:00https://nhimg.org/glossary/fiesta-exploit-kit/2026-10-20T15:22:07+00:00https://nhimg.org/glossary/evasive-panda-threat-actor/2026-10-20T15:22:08+00:00https://nhimg.org/glossary/flyingyeti-threat-actor/2026-10-20T15:22:10+00:00https://nhimg.org/glossary/ghostemperor-threat-actor/2026-10-20T15:22:18+00:00https://nhimg.org/glossary/ghostsec-hacktivist-group/2026-10-20T15:22:23+00:00https://nhimg.org/glossary/ghostnet-cyber-espionage-operation/2026-10-20T15:22:27+00:00https://nhimg.org/glossary/h-worm-houdini-rat/2026-10-20T15:22:28+00:00https://nhimg.org/glossary/grandsoft-exploit-kit/2026-10-20T15:22:31+00:00https://nhimg.org/glossary/helk-hunting-elk/2026-10-20T15:22:31+00:00https://nhimg.org/glossary/ghostwriter-influence-operation/2026-10-20T15:22:33+00:00https://nhimg.org/glossary/grr-rapid-response-remote-live-forensics-framework/2026-10-20T15:22:35+00:00https://nhimg.org/glossary/hidden-tear-open-source-ransomware/2026-10-20T15:22:43+00:00https://nhimg.org/glossary/longhorn-the-lamberts/2026-10-20T15:22:50+00:00https://nhimg.org/glossary/jigsaw-ransomware/2026-10-20T15:22:52+00:00https://nhimg.org/glossary/kippo-ssh-honeypot/2026-10-20T15:22:52+00:00https://nhimg.org/glossary/luna-moth-silent-ransom-group/2026-10-20T15:22:54+00:00https://nhimg.org/glossary/lightbasin-threat-actor/2026-10-20T15:22:56+00:00https://nhimg.org/glossary/lyceum-threat-actor/2026-10-20T15:22:59+00:00https://nhimg.org/glossary/mac-apt-macos-artefact-parsing-tool/2026-10-20T15:23:00+00:00https://nhimg.org/glossary/magnet-ram-capture-memory-acquisition-tool/2026-10-20T15:23:03+00:00https://nhimg.org/glossary/memoryze-memory-forensics-tool/2026-10-20T15:23:12+00:00https://nhimg.org/glossary/merlin-c2-framework/2026-10-20T15:23:16+00:00https://nhimg.org/glossary/nemucod-javascript-downloader/2026-10-20T15:23:16+00:00https://nhimg.org/glossary/neutrino-exploit-kit/2026-10-20T15:23:18+00:00https://nhimg.org/glossary/openioc-indicator-of-compromise-format/2026-10-20T15:23:20+00:00https://nhimg.org/glossary/msfvenom-metasploit-payload-generator/2026-10-20T15:23:22+00:00https://nhimg.org/glossary/projectsauron-strider/2026-10-20T15:23:23+00:00https://nhimg.org/glossary/ransomvc-ransomware-group/2026-10-20T15:23:25+00:00https://nhimg.org/glossary/red-menshen-threat-actor/2026-10-20T15:23:33+00:00https://nhimg.org/glossary/regripper-windows-registry-forensics-tool/2026-10-20T15:23:36+00:00https://nhimg.org/glossary/redline-mandiant-host-investigation-tool/2026-10-20T15:23:40+00:00https://nhimg.org/glossary/sans-investigative-forensic-toolkit-sift-workstation/2026-10-20T15:23:41+00:00https://nhimg.org/glossary/sality-malware-family/2026-10-20T15:23:42+00:00https://nhimg.org/glossary/roaming-mantis-threat-actor/2026-10-20T15:23:44+00:00https://nhimg.org/glossary/storm-1167-aitm-phishing-threat-actor/2026-10-20T15:23:48+00:00https://nhimg.org/glossary/rocket-kitten-threat-actor/2026-10-20T15:23:52+00:00https://nhimg.org/glossary/sub7-subseven-rat/2026-10-20T15:23:52+00:00https://nhimg.org/glossary/suncrypt-ransomware/2026-10-20T15:23:57+00:00https://nhimg.org/glossary/sundown-exploit-kit/2026-10-20T15:24:01+00:00https://nhimg.org/glossary/t-pot-multi-honeypot-platform/2026-10-20T15:24:04+00:00https://nhimg.org/glossary/tdl4-tdss-rootkit-botnet/2026-10-20T15:24:04+00:00https://nhimg.org/glossary/tinba-tiny-banker-trojan/2026-10-20T15:24:08+00:00https://nhimg.org/glossary/timesketch-forensic-timeline-analysis-tool/2026-10-20T15:24:09+00:00https://nhimg.org/glossary/terror-exploit-kit/2026-10-20T15:24:11+00:00https://nhimg.org/glossary/sweet-orange-exploit-kit/2026-10-20T15:24:14+00:00https://nhimg.org/glossary/torpig-banking-trojan-botnet/2026-10-20T15:24:15+00:00https://nhimg.org/glossary/torrentlocker-ransomware/2026-10-20T15:24:21+00:00https://nhimg.org/glossary/tortoiseshell-imperial-kitten/2026-10-20T15:24:22+00:00https://nhimg.org/glossary/unc4841-barracuda-esg-threat-actor/2026-10-20T15:24:25+00:00https://nhimg.org/glossary/troldesh-shade-ransomware/2026-10-20T15:24:27+00:00https://nhimg.org/glossary/vanilla-tempest-threat-actor/2026-10-20T15:24:31+00:00https://nhimg.org/glossary/void-blizzard-laundry-bear/2026-10-20T15:24:32+00:00https://nhimg.org/glossary/waledac-botnet/2026-10-20T15:24:34+00:00https://nhimg.org/glossary/wagemole-north-korean-it-worker-threat-actor/2026-10-20T15:24:37+00:00https://nhimg.org/glossary/x-ways-forensics/2026-10-20T15:24:38+00:00https://nhimg.org/glossary/yorotrooper-threat-actor/2026-10-20T15:24:40+00:00https://nhimg.org/glossary/azure-front-door-secret-contributor-role/2026-10-20T15:24:47+00:00https://nhimg.org/glossary/azure-key-vault-crypto-service-release-user-role/2026-10-20T15:24:51+00:00https://nhimg.org/glossary/google-cloud-kms-autokey-admin-role-rolescloudkmsautokeyadmin/2026-10-20T15:24:53+00:00https://nhimg.org/glossary/google-cloud-kms-crypto-operator-role-rolescloudkmscryptooperator/2026-10-20T15:24:58+00:00https://nhimg.org/glossary/google-cloud-kms-cryptokey-encrypter-role-rolescloudkmscryptokeyencrypter/2026-10-20T15:24:59+00:00https://nhimg.org/glossary/google-cloud-kms-cryptokey-signer-role-rolescloudkmssigner/2026-10-20T15:24:59+00:00https://nhimg.org/glossary/google-cloud-kms-ekm-connections-admin-role-rolescloudkmsekmconnectionsadmin/2026-10-20T15:25:03+00:00https://nhimg.org/glossary/google-cloud-kms-cryptokey-signerverifier-role-rolescloudkmssignerverifier/2026-10-20T15:25:06+00:00https://nhimg.org/glossary/google-cloud-kms-importer-role-rolescloudkmsimporter/2026-10-20T15:25:08+00:00https://nhimg.org/glossary/google-cloud-secret-manager-viewer-role-rolessecretmanagerviewer/2026-10-20T15:25:19+00:00https://nhimg.org/glossary/angr-binary-analysis-framework/2026-10-20T15:25:20+00:00https://nhimg.org/glossary/google-cloud-secret-manager-secret-version-manager-role/2026-10-20T15:25:23+00:00https://nhimg.org/glossary/software-container-provenance/2026-10-20T15:25:25+00:00https://nhimg.org/glossary/owasp-wrongsecrets/2026-10-20T15:25:27+00:00https://nhimg.org/glossary/google-cloud-secret-manager-secret-version-adder-role/2026-10-20T15:25:30+00:00https://nhimg.org/glossary/armitage-metasploit-gui/2026-10-20T15:25:31+00:00https://nhimg.org/glossary/autosploit-automated-exploitation-tool/2026-10-20T15:25:34+00:00https://nhimg.org/glossary/cert-vulnerability-notes-database-us-certcertcc/2026-10-20T15:25:46+00:00https://nhimg.org/glossary/blackarch-linux-penetration-testing-distribution/2026-10-20T15:25:50+00:00https://nhimg.org/glossary/commando-vm-windows-offensive-distribution/2026-10-20T15:25:51+00:00https://nhimg.org/glossary/china-national-vulnerability-database-cnnvd/2026-10-20T15:25:54+00:00https://nhimg.org/glossary/sublist3r-subdomain-enumeration-tool/2026-10-20T15:25:56+00:00https://nhimg.org/glossary/owasp-amass-attack-surface-mapping-tool/2026-10-20T15:26:00+00:00https://nhimg.org/glossary/foca-fingerprinting-organisations-with-collected-archives/2026-10-20T15:26:03+00:00https://nhimg.org/glossary/cve-2025-38352-linux-posix-cpu-timers-race-condition/2026-10-20T15:26:10+00:00https://nhimg.org/glossary/zoomeye-internet-asset-search-engine/2026-10-20T15:26:17+00:00https://nhimg.org/glossary/service-proxy/2026-10-20T15:26:20+00:00https://nhimg.org/faq/how-are-ai-agent-identities-created-in-microsoft-entra-agent-id/2026-10-20T15:26:26+00:00https://nhimg.org/faq/how-are-ai-agents-authorised-to-access-resources-in-microsoft-entra-agent-id/2026-10-20T15:26:28+00:00https://nhimg.org/faq/how-do-access-packages-work-for-ai-agent-identities-in-microsoft-entra/2026-10-20T15:26:32+00:00https://nhimg.org/faq/how-do-ai-agents-authenticate-and-obtain-tokens-with-microsoft-entra-agent-id/2026-10-20T15:26:36+00:00https://nhimg.org/faq/how-do-ai-agents-in-microsoft-entra-id-obtain-and-use-tokens/2026-10-20T15:26:38+00:00https://nhimg.org/faq/how-do-you-apply-conditional-access-policies-to-ai-agents-in-microsoft-entra/2026-10-20T15:26:48+00:00https://nhimg.org/faq/how-do-you-apply-least-privilege-to-amazon-bedrock-agent-execution-roles/2026-10-20T15:26:50+00:00https://nhimg.org/faq/how-do-you-allowlist-tools-for-ai-agents/2026-10-20T15:26:58+00:00https://nhimg.org/faq/how-do-you-discover-ai-agents-in-use-with-microsoft-global-secure-access/2026-10-20T15:27:05+00:00https://nhimg.org/faq/how-do-you-disable-ai-agent-identities-in-a-microsoft-entra-tenant/2026-10-20T15:27:08+00:00https://nhimg.org/faq/how-do-you-investigate-ai-agent-sign-ins-in-microsoft-entra-agent-id/2026-10-20T15:27:12+00:00https://nhimg.org/faq/how-do-you-manage-ai-agent-identities-in-microsoft-entra/2026-10-20T15:27:19+00:00https://nhimg.org/faq/how-do-you-secure-a-model-context-protocol-mcp-server-with-microsoft-entra-id/2026-10-20T15:27:21+00:00https://nhimg.org/faq/how-do-you-secure-ai-agent-identities-with-microsoft-entra-conditional-access/2026-10-20T15:27:26+00:00https://nhimg.org/faq/you-secure-model-context-protocol-traffic-microsoft-global-secure-access/2026-10-20T15:27:31+00:00https://nhimg.org/faq/how-do-you-validate-microsoft-entra-agent-identity-tokens-in-a-downstream-api/2026-10-20T15:27:41+00:00https://nhimg.org/faq/how-do-you-view-and-inventory-ai-agent-identities-in-your-microsoft-entra-tenant/2026-10-20T15:27:44+00:00https://nhimg.org/faq/you-secure-third-party-ai-agents-such-amazon-bedrock-microsoft-entra-agent-id/2026-10-20T15:27:49+00:00https://nhimg.org/faq/how-does-microsoft-entra-id-protection-detect-risky-ai-agents/2026-10-20T15:27:52+00:00https://nhimg.org/faq/how-should-environment-variables-be-handled-in-ai-agent-sandboxes/2026-10-20T15:27:59+00:00https://nhimg.org/faq/best-practices-securing-ai-agent-identities-microsoft-entra-agent-id/2026-10-20T15:28:02+00:00https://nhimg.org/faq/what-does-an-ai-kill-switch-look-like/2026-10-20T15:28:03+00:00https://nhimg.org/faq/difference-between-agent-identities-service-principals-applications-microsoft/2026-10-20T15:28:11+00:00https://nhimg.org/faq/what-is-the-difference-between-ai-guardrails-and-hooks/2026-10-20T15:28:17+00:00https://nhimg.org/faq/which-oauth-flows-do-ai-agents-use-in-microsoft-entra-agent-id/2026-10-20T15:28:20+00:00https://nhimg.org/faq/should-ai-knowledge-assistants-provide-provenance-for-their-answers/2026-10-20T15:28:24+00:00https://nhimg.org/faq/what-constitutes-a-governed-dataset/2026-10-20T15:28:26+00:00https://nhimg.org/faq/how-do-you-discover-shadow-ai-usage-with-microsoft-entra-global-secure-access/2026-10-20T15:28:32+00:00https://nhimg.org/faq/how-do-you-secure-generative-ai-with-microsoft-entra/2026-10-20T15:28:36+00:00https://nhimg.org/faq/how-does-isoiec-42001-address-ai-agent-identity/2026-10-20T15:28:39+00:00https://nhimg.org/faq/what-does-calibrated-trust-mean-in-practice/2026-10-20T15:28:43+00:00https://nhimg.org/faq/what-is-an-example-of-maintaining-human-oversight-of-ai/2026-10-20T15:28:46+00:00https://nhimg.org/faq/how-do-you-detect-llmjacking-activity-in-aws-cloudtrail/2026-10-20T15:28:51+00:00https://nhimg.org/faq/how-do-you-apply-amazon-bedrock-guardrails-to-bedrock-agents/2026-10-20T15:28:54+00:00https://nhimg.org/faq/what-does-nist-guidance-say-about-governing-open-weight-ai-models/2026-10-20T15:28:57+00:00https://nhimg.org/faq/how-do-you-use-amazon-bedrock-guardrails-to-protect-ai-agents-and-applications/2026-10-20T15:29:04+00:00https://nhimg.org/faq/microsoft-entra-prompt-injection-protection-secure-enterprise-generative-ai-apps/2026-10-20T15:29:08+00:00https://nhimg.org/faq/how-do-you-use-azure-ai-prompt-shields-to-block-jailbreak-attempts/2026-10-20T15:29:12+00:00https://nhimg.org/faq/how-do-you-set-deterministic-boundaries-for-probabilistic-ai-output/2026-10-20T15:29:13+00:00https://nhimg.org/faq/how-do-you-detect-llmjacking-attacks-against-azure-api-management/2026-10-20T15:29:15+00:00https://nhimg.org/faq/is-uncensored-ai-safe-to-use/2026-10-20T15:29:20+00:00https://nhimg.org/faq/what-are-the-risks-of-non-deterministic-ai/2026-10-20T15:29:23+00:00https://nhimg.org/faq/what-is-an-example-of-a-dataset-blind-spot-in-ai/2026-10-20T15:29:27+00:00https://nhimg.org/faq/what-metrics-are-used-to-evaluate-llm-hallucinations/2026-10-20T15:29:33+00:00https://nhimg.org/faq/why-is-ai-development-outpacing-ai-evaluation/2026-10-20T15:29:36+00:00https://nhimg.org/faq/how-are-homoglyphs-used-to-bypass-file-upload-extension-filters/2026-10-20T15:29:38+00:00https://nhimg.org/faq/how-can-you-tell-if-an-apk-has-been-modified/2026-10-20T15:29:39+00:00https://nhimg.org/faq/how-do-you-prevent-sensitive-parameters-from-appearing-in-urls/2026-10-20T15:29:46+00:00https://nhimg.org/faq/how-do-you-render-templates-safely/2026-10-20T15:29:46+00:00https://nhimg.org/faq/how-does-csrf-protection-work-in-angular/2026-10-20T15:29:47+00:00https://nhimg.org/faq/how-do-attackers-bypass-web-application-authentication-and-how-do-you-prevent-it/2026-10-20T15:29:52+00:00https://nhimg.org/faq/is-vast-better-than-stride-for-threat-modeling/2026-10-20T15:29:59+00:00https://nhimg.org/faq/what-is-the-difference-between-http-401-and-403/2026-10-20T15:30:00+00:00https://nhimg.org/faq/how-do-permissions-and-consent-work-for-applications-in-microsoft-entra-id/2026-10-20T15:30:04+00:00https://nhimg.org/faq/can-feature-flags-be-used-as-authorisation-controls/2026-10-20T15:30:07+00:00https://nhimg.org/faq/how-do-you-add-resource-context-to-rbac/2026-10-20T15:30:10+00:00https://nhimg.org/faq/you-apply-least-privilege-application-permissions-microsoft-entra-id/2026-10-20T15:30:13+00:00https://nhimg.org/faq/how-do-scopes-and-permissions-work-in-the-microsoft-identity-platform/2026-10-20T15:30:17+00:00https://nhimg.org/faq/how-do-you-configure-app-consent-policies-in-microsoft-entra-id/2026-10-20T15:30:22+00:00https://nhimg.org/faq/how-do-you-configure-authorisation-modes-on-the-kubernetes-api-server/2026-10-20T15:30:29+00:00https://nhimg.org/faq/how-do-you-configure-the-admin-consent-workflow-in-microsoft-entra-id/2026-10-20T15:30:31+00:00https://nhimg.org/faq/how-do-you-create-a-custom-role-in-microsoft-entra-id/2026-10-20T15:30:34+00:00https://nhimg.org/faq/how-do-you-detect-kubernetes-rolebinding-or-clusterrolebinding-changes/2026-10-20T15:30:38+00:00https://nhimg.org/faq/how-do-you-enable-kubernetes-rbac-on-azure-kubernetes-service-clusters/2026-10-20T15:30:41+00:00https://nhimg.org/faq/how-do-you-detect-rbac-permission-enumeration-in-kubernetes/2026-10-20T15:30:45+00:00https://nhimg.org/faq/you-manage-evaluate-application-consent-requests-microsoft-entra-id/2026-10-20T15:30:48+00:00https://nhimg.org/faq/how-do-you-protect-microsoft-entra-id-against-consent-phishing-attacks/2026-10-20T15:30:53+00:00https://nhimg.org/faq/how-do-you-restrict-a-microsoft-entra-application-to-a-specific-set-of-users/2026-10-20T15:30:57+00:00https://nhimg.org/faq/how-do-you-restrict-user-consent-to-applications-in-microsoft-entra-id/2026-10-20T15:31:02+00:00https://nhimg.org/faq/how-do-you-review-and-approve-admin-consent-requests-in-microsoft-entra-id/2026-10-20T15:31:04+00:00https://nhimg.org/faq/you-review-permissions-granted-enterprise-applications-microsoft-entra-id/2026-10-20T15:31:10+00:00https://nhimg.org/faq/how-do-you-use-groups-for-secure-access-control-in-microsoft-entra-id/2026-10-20T15:31:13+00:00https://nhimg.org/faq/how-does-role-based-access-control-work-in-microsoft-entra-id/2026-10-20T15:31:18+00:00https://nhimg.org/faq/should-azure-key-vault-use-azure-rbac-or-access-policies/2026-10-20T15:31:22+00:00https://nhimg.org/faq/risks-granting-tenant-wide-admin-consent-application-microsoft-entra-id/2026-10-20T15:31:28+00:00https://nhimg.org/faq/difference-between-delegated-application-permissions-microsoft-entra-id/2026-10-20T15:31:32+00:00https://nhimg.org/faq/kubernetes-rbac-permissions-allow-privilege-escalation-you-restrict-them/2026-10-20T15:31:37+00:00https://nhimg.org/faq/why-should-custom-subscription-owner-roles-not-be-created-in-azure/2026-10-20T15:31:39+00:00https://nhimg.org/faq/oracle-cloud-iam-policies-avoid-granting-manage-all-resources-permissions/2026-10-20T15:31:42+00:00https://nhimg.org/faq/why-should-the-cluster-admin-role-be-tightly-restricted-in-kubernetes/2026-10-20T15:31:47+00:00https://nhimg.org/faq/why-should-the-user-access-administrator-role-be-tightly-limited-in-azure/2026-10-20T15:31:50+00:00https://nhimg.org/faq/why-should-wildcards-be-avoided-in-kubernetes-roles-and-clusterroles/2026-10-20T15:31:56+00:00https://nhimg.org/faq/how-do-you-enforce-mfa-in-an-aws-cognito-user-pool/2026-10-20T15:32:01+00:00https://nhimg.org/faq/how-do-you-configure-password-policy-requirements-in-an-aws-cognito-user-pool/2026-10-20T15:32:08+00:00https://nhimg.org/faq/why-should-amazon-cognito-identity-pools-not-allow-unauthenticated-guest-access/2026-10-20T15:32:12+00:00https://nhimg.org/faq/you-protect-aws-cognito-user-pool-against-malicious-compromised-credential-sign/2026-10-20T15:32:16+00:00https://nhimg.org/faq/why-should-guest-access-be-disabled-in-aws-cognito-identity-pools/2026-10-20T15:32:19+00:00https://nhimg.org/faq/prevent-user-existence-errors-enabled-aws-cognito-user-pool-client/2026-10-20T15:32:21+00:00https://nhimg.org/faq/how-can-azure-cdn-expose-a-sas-token/2026-10-20T15:32:24+00:00https://nhimg.org/faq/how-do-you-detect-abuse-of-aws-console-getsignintoken/2026-10-20T15:32:27+00:00https://nhimg.org/faq/how-do-you-detect-aws-imds-credentials-being-used-outside-aws/2026-10-20T15:32:34+00:00https://nhimg.org/faq/you-detect-s3-browser-being-used-create-iam-users-keys-bucket-policies-aws/2026-10-20T15:32:44+00:00https://nhimg.org/faq/how-do-you-detect-unauthorised-or-unauthenticated-access-to-the-kubernetes-api/2026-10-20T15:32:46+00:00https://nhimg.org/faq/you-disable-anonymous-authentication-kubernetes-api-server-kubelet/2026-10-20T15:32:49+00:00https://nhimg.org/faq/how-do-you-monitor-kvm-hypervisor-security/2026-10-20T15:32:57+00:00https://nhimg.org/faq/how-do-you-keep-an-s3-bucket-private-while-serving-it-through-a-public-api/2026-10-20T15:32:57+00:00https://nhimg.org/faq/how-do-you-respond-quickly-to-incidents-in-kubernetes/2026-10-20T15:33:01+00:00https://nhimg.org/faq/how-do-you-disable-the-legacy-instance-metadata-service-endpoint-in-oracle-cloud/2026-10-20T15:33:03+00:00https://nhimg.org/faq/how-do-you-limit-blast-radius-with-azure-subscriptions/2026-10-20T15:33:07+00:00https://nhimg.org/faq/you-use-tenant-restrictions-control-access-saas-apps-microsoft-entra/2026-10-20T15:33:10+00:00https://nhimg.org/faq/how-does-context-enrichment-work-for-aws-cloud-security/2026-10-20T15:33:14+00:00https://nhimg.org/faq/what-are-the-security-risks-of-windows-containers-in-docker/2026-10-20T15:33:17+00:00https://nhimg.org/faq/what-is-the-difference-between-api-integrated-applications-and-saas/2026-10-20T15:33:21+00:00https://nhimg.org/faq/what-does-a-records-retention-schedule-detail/2026-10-20T15:33:26+00:00https://nhimg.org/faq/you-configure-tenant-restrictions-stop-data-exfiltration-other-microsoft-entra/2026-10-20T15:33:33+00:00https://nhimg.org/faq/how-can-you-protect-secrets-from-untrusted-code-in-ci-workflows/2026-10-20T15:33:36+00:00https://nhimg.org/faq/how-do-you-configure-universal-tenant-restrictions-in-microsoft-entra/2026-10-20T15:33:37+00:00https://nhimg.org/faq/why-should-container-images-and-build-artefacts-be-scanned/2026-10-20T15:33:39+00:00https://nhimg.org/faq/how-do-you-set-up-microsoft-entra-verified-id-for-verifiable-credentials/2026-10-20T15:33:43+00:00https://nhimg.org/faq/how-do-you-configure-microsoft-entra-hybrid-join-for-windows-devices/2026-10-20T15:33:47+00:00https://nhimg.org/faq/how-do-you-audit-administrator-changes-to-microsoft-entra-connect-sync/2026-10-20T15:33:51+00:00https://nhimg.org/faq/how-do-you-audit-ntlm-authentication-usage-across-a-windows-domain/2026-10-20T15:33:55+00:00https://nhimg.org/faq/how-do-you-configure-secure-ldap-ldaps-for-microsoft-entra-domain-services/2026-10-20T15:33:57+00:00https://nhimg.org/faq/how-do-you-detect-a-new-domain-trust-being-created-in-active-directory/2026-10-20T15:34:00+00:00https://nhimg.org/faq/how-do-you-detect-active-directory-enumeration-using-powershell-cmdlets/2026-10-20T15:34:06+00:00https://nhimg.org/faq/how-do-you-detect-changes-to-domain-admins-group-membership/2026-10-20T15:34:08+00:00https://nhimg.org/faq/how-do-you-detect-dnsadmins-serverlevelplugindll-abuse-on-windows-dns-servers/2026-10-20T15:34:12+00:00https://nhimg.org/faq/how-do-you-detect-active-directory-enumeration-with-adfind/2026-10-20T15:34:18+00:00https://nhimg.org/faq/how-do-you-detect-dsrm-account-abuse-for-active-directory-persistence/2026-10-20T15:34:24+00:00https://nhimg.org/faq/how-do-you-detect-group-policy-preferences-password-harvesting-from-sysvol/2026-10-20T15:34:26+00:00https://nhimg.org/faq/you-detect-group-policy-abuse-used-grant-privileges-active-directory/2026-10-20T15:34:29+00:00https://nhimg.org/faq/how-can-you-detect-malicious-logon-scripts-added-to-group-policy/2026-10-20T15:34:33+00:00https://nhimg.org/faq/you-detect-members-being-added-security-enabled-groups-active-directory/2026-10-20T15:34:38+00:00https://nhimg.org/faq/how-do-you-detect-ntdsdit-extraction-from-domain-controllers/2026-10-20T15:34:40+00:00https://nhimg.org/faq/you-detect-vulnerable-netlogon-secure-channel-connections-linked-zerologon/2026-10-20T15:34:45+00:00https://nhimg.org/faq/how-do-you-detect-writedacl-permission-changes-on-active-directory-objects/2026-10-20T15:34:50+00:00https://nhimg.org/faq/you-enable-password-writeback-microsoft-entra-id-premises-active-directory/2026-10-20T15:34:53+00:00https://nhimg.org/faq/how-do-you-harden-microsoft-entra-connect-sync-servers/2026-10-20T15:34:55+00:00https://nhimg.org/faq/how-do-you-prepare-for-rc4-deprecation-in-microsoft-entra-domain-services/2026-10-20T15:35:00+00:00https://nhimg.org/faq/you-prevent-object-takeover-through-soft-hard-matching-microsoft-entra-connect/2026-10-20T15:35:03+00:00https://nhimg.org/faq/how-do-you-restrict-default-user-permissions-in-microsoft-entra-id/2026-10-20T15:35:08+00:00https://nhimg.org/faq/you-protect-microsoft-365-attacks-originating-premises-active-directory/2026-10-20T15:35:12+00:00https://nhimg.org/faq/how-do-you-restrict-which-users-can-join-devices-to-microsoft-entra-id/2026-10-20T15:35:14+00:00https://nhimg.org/faq/how-do-you-secure-microsoft-entra-domain-services/2026-10-20T15:35:17+00:00https://nhimg.org/faq/how-do-you-secure-on-premises-computer-accounts-in-active-directory/2026-10-20T15:35:21+00:00https://nhimg.org/faq/admin-takeover-unmanaged-microsoft-entra-directory-work-risks/2026-10-20T15:35:24+00:00https://nhimg.org/faq/microsoft-entra-password-protection-block-weak-passwords-active-directory/2026-10-20T15:35:30+00:00https://nhimg.org/faq/how-does-kerberos-constrained-delegation-work-with-microsoft-entra-id/2026-10-20T15:35:33+00:00https://nhimg.org/faq/pass-through-authentication-work-microsoft-entra-connect-you-secure-it/2026-10-20T15:35:36+00:00https://nhimg.org/faq/how-does-password-hash-synchronisation-work-with-microsoft-entra-connect/2026-10-20T15:35:42+00:00https://nhimg.org/faq/how-does-unicode-spoofing-affect-active-directory/2026-10-20T15:35:44+00:00https://nhimg.org/faq/you-use-password-hash-sync-pass-through-authentication-federation-microsoft/2026-10-20T15:35:49+00:00https://nhimg.org/faq/how-does-seamless-sso-work-in-microsoft-entra-connect-and-how-do-you-secure-it/2026-10-20T15:35:52+00:00https://nhimg.org/faq/what-are-the-key-best-practices-for-securing-a-microsoft-entra-id-tenant/2026-10-20T15:35:54+00:00https://nhimg.org/faq/what-is-the-difference-between-static-and-dynamic-groups/2026-10-20T15:35:57+00:00https://nhimg.org/faq/lm-hash-storage-disabled-windows-you-detect-it-being-re-enabled/2026-10-20T15:36:01+00:00https://nhimg.org/faq/why-should-ntlmv1-be-disabled-and-how-do-you-detect-ntlmv1-logons/2026-10-20T15:36:08+00:00https://nhimg.org/faq/password-hash-synchronisation-enabled-hybrid-microsoft-entra-deployments/2026-10-20T15:36:10+00:00https://nhimg.org/faq/why-should-seamless-sso-be-disabled-in-microsoft-entra-hybrid-deployments/2026-10-20T15:36:13+00:00https://nhimg.org/faq/how-do-you-avoid-oversharing-in-microsoft-teams-channels/2026-10-20T15:36:16+00:00https://nhimg.org/faq/how-do-attackers-remotely-take-over-a-phone/2026-10-20T15:36:19+00:00https://nhimg.org/faq/why-are-phishing-emails-dangerous/2026-10-20T15:36:21+00:00https://nhimg.org/faq/what-security-controls-should-be-applied-to-slack/2026-10-20T15:36:23+00:00https://nhimg.org/faq/how-do-vishing-attacks-capture-sso-credentials/2026-10-20T15:36:26+00:00https://nhimg.org/faq/you-detect-attackers-searching-credentials-files-registry-windows/2026-10-20T15:36:31+00:00https://nhimg.org/faq/how-do-you-configure-pam-for-sshd-on-aws/2026-10-20T15:36:35+00:00https://nhimg.org/faq/how-do-you-manage-local-administrators-on-microsoft-entra-joined-devices/2026-10-20T15:36:40+00:00https://nhimg.org/faq/how-do-you-find-and-clean-up-stale-devices-in-microsoft-entra-id/2026-10-20T15:36:43+00:00https://nhimg.org/faq/you-require-app-protection-policies-mobile-devices-conditional-access/2026-10-20T15:36:46+00:00https://nhimg.org/faq/how-does-device-registration-work-in-microsoft-entra-id/2026-10-20T15:36:49+00:00https://nhimg.org/faq/you-require-compliant-devices-conditional-access-microsoft-entra-id/2026-10-20T15:36:52+00:00https://nhimg.org/faq/how-does-macos-platform-sso-work-with-microsoft-entra-id/2026-10-20T15:36:55+00:00https://nhimg.org/faq/how-does-microsoft-smartscreen-treat-signed-binaries/2026-10-20T15:36:59+00:00https://nhimg.org/faq/what-does-nist-recommend-for-securing-developer-workstations/2026-10-20T15:37:08+00:00https://nhimg.org/faq/you-monitor-detect-suspicious-device-activity-microsoft-entra-id/2026-10-20T15:37:13+00:00https://nhimg.org/faq/how-do-merchants-detect-fake-or-fraudulent-credit-cards/2026-10-20T15:37:15+00:00https://nhimg.org/faq/how-does-microsoft-entra-id-protect-against-telephony-fraud-in-mfa/2026-10-20T15:37:20+00:00https://nhimg.org/faq/what-is-a-captcha-used-for/2026-10-20T15:37:21+00:00https://nhimg.org/faq/how-do-account-takeovers-happen-through-social-media-private-messages/2026-10-20T15:37:24+00:00https://nhimg.org/faq/how-do-it-application-controls-itacs-depend-on-it-general-controls-itgcs/2026-10-20T15:37:28+00:00https://nhimg.org/faq/does-cmmc-level-2-require-phishing-resistant-mfa/2026-10-20T15:37:30+00:00https://nhimg.org/faq/how-do-you-configure-microsoft-entra-id-for-hipaa-compliance/2026-10-20T15:37:35+00:00https://nhimg.org/faq/how-do-you-write-an-outcome-statement-for-a-security-control/2026-10-20T15:37:42+00:00https://nhimg.org/faq/how-do-you-configure-microsoft-entra-id-to-meet-cmmc-requirements/2026-10-20T15:37:46+00:00https://nhimg.org/faq/how-do-you-configure-microsoft-entra-id-to-meet-fedramp-high-requirements/2026-10-20T15:37:49+00:00https://nhimg.org/faq/what-are-examples-of-digital-governance/2026-10-20T15:37:51+00:00https://nhimg.org/faq/microsoft-entra-id-help-meet-omb-memorandum-m-22-09-zero-trust-requirements/2026-10-20T15:37:54+00:00https://nhimg.org/faq/what-are-examples-of-entity-level-controls/2026-10-20T15:37:56+00:00https://nhimg.org/faq/how-do-you-configure-microsoft-entra-id-to-support-hitrust-controls/2026-10-20T15:37:59+00:00https://nhimg.org/faq/how-do-you-configure-microsoft-entra-id-to-meet-pci-dss-requirements/2026-10-20T15:38:03+00:00https://nhimg.org/faq/what-are-examples-of-security-safeguards/2026-10-20T15:38:07+00:00https://nhimg.org/faq/what-are-the-risks-of-fragmented-security-controls/2026-10-20T15:38:11+00:00https://nhimg.org/faq/refresh-tokens-work-microsoft-identity-platform-they-protected/2026-10-20T15:38:18+00:00https://nhimg.org/faq/what-governance-problems-do-spreadsheets-create-in-enterprises/2026-10-20T15:38:20+00:00https://nhimg.org/faq/how-do-you-access-and-review-activity-logs-in-microsoft-entra-id/2026-10-20T15:38:23+00:00https://nhimg.org/faq/how-do-you-audit-guest-user-activity-in-microsoft-entra-b2b-collaboration/2026-10-20T15:38:25+00:00https://nhimg.org/faq/you-block-access-users-elevated-insider-risk-using-conditional-access/2026-10-20T15:38:31+00:00https://nhimg.org/faq/how-do-you-block-anonymising-proxies-and-tor-traffic-in-okta/2026-10-20T15:38:33+00:00https://nhimg.org/faq/you-allow-block-b2b-guest-invitations-specific-domains-microsoft-entra-id/2026-10-20T15:38:35+00:00https://nhimg.org/faq/how-do-you-block-authentication-transfer-with-conditional-access/2026-10-20T15:38:40+00:00https://nhimg.org/faq/how-do-you-block-device-code-flow-with-conditional-access-in-microsoft-entra-id/2026-10-20T15:38:46+00:00https://nhimg.org/faq/how-do-you-block-device-code-flow-phishing-with-conditional-access/2026-10-20T15:38:50+00:00https://nhimg.org/faq/how-do-you-block-risky-sign-ins-with-conditional-access-in-microsoft-entra-id/2026-10-20T15:38:59+00:00https://nhimg.org/faq/you-block-sign-ins-specific-countries-conditional-access-microsoft-entra-id/2026-10-20T15:39:02+00:00https://nhimg.org/faq/you-block-sign-ins-unknown-unsupported-device-platforms-conditional-access/2026-10-20T15:39:08+00:00https://nhimg.org/faq/you-block-legacy-authentication-conditional-access-microsoft-entra-id/2026-10-20T15:39:11+00:00https://nhimg.org/faq/how-do-you-build-conditional-access-policies-in-microsoft-entra-id/2026-10-20T15:39:16+00:00https://nhimg.org/faq/how-do-you-centralise-root-credential-management-in-aws-organizations/2026-10-20T15:39:18+00:00https://nhimg.org/faq/you-clean-up-unmanaged-microsoft-entra-accounts-created-through-self-service/2026-10-20T15:39:22+00:00https://nhimg.org/faq/how-do-you-collect-and-analyse-microsoft-entra-id-sign-in-and-audit-logs/2026-10-20T15:39:30+00:00https://nhimg.org/faq/how-do-you-configure-a-custom-banned-password-list-in-microsoft-entra-id/2026-10-20T15:39:35+00:00https://nhimg.org/faq/how-do-you-configure-a-strong-iam-account-password-policy-in-aws/2026-10-20T15:39:42+00:00https://nhimg.org/faq/how-do-you-configure-a-strong-iam-password-policy-in-huawei-cloud/2026-10-20T15:39:44+00:00https://nhimg.org/faq/how-do-you-configure-a-strong-password-policy-in-okta/2026-10-20T15:39:47+00:00https://nhimg.org/faq/how-do-you-configure-a-strong-password-policy-in-google-workspace/2026-10-20T15:39:49+00:00https://nhimg.org/faq/how-do-you-configure-access-token-lifetimes-in-microsoft-entra-id/2026-10-20T15:39:53+00:00https://nhimg.org/faq/how-do-you-configure-microsoft-entra-authentication-for-azure-sql-server/2026-10-20T15:39:57+00:00https://nhimg.org/faq/how-do-you-configure-cross-tenant-access-settings-in-microsoft-entra-id/2026-10-20T15:40:03+00:00https://nhimg.org/faq/how-do-you-configure-oidc-single-sign-on-for-applications-in-microsoft-entra-id/2026-10-20T15:40:08+00:00https://nhimg.org/faq/how-do-you-configure-password-expiry-and-reuse-rules-in-oci-identity-domains/2026-10-20T15:40:12+00:00https://nhimg.org/faq/you-configure-risk-based-conditional-access-policies-microsoft-entra-id/2026-10-20T15:40:17+00:00https://nhimg.org/faq/you-configure-sign-frequency-session-lifetime-conditional-access/2026-10-20T15:40:22+00:00https://nhimg.org/faq/how-do-you-configure-self-service-password-reset-securely-in-microsoft-entra-id/2026-10-20T15:40:26+00:00https://nhimg.org/faq/you-configure-sign-frequency-conditional-access-microsoft-entra-id/2026-10-20T15:40:31+00:00https://nhimg.org/faq/how-do-you-configure-smart-lockout-in-microsoft-entra-id/2026-10-20T15:40:35+00:00https://nhimg.org/faq/how-do-you-configure-the-oci-iam-password-policy-for-local-users/2026-10-20T15:40:40+00:00https://nhimg.org/faq/you-configure-okta-global-session-policy-idle-timeout-lifetime-persistent/2026-10-20T15:40:44+00:00https://nhimg.org/faq/how-do-you-create-a-security-plan-for-external-user-access-in-microsoft-entra-id/2026-10-20T15:40:48+00:00https://nhimg.org/faq/how-do-you-customise-token-claims-for-applications-in-microsoft-entra-id/2026-10-20T15:40:52+00:00https://nhimg.org/faq/you-detect-applications-using-ropc-authentication-flow-microsoft-entra-id/2026-10-20T15:40:56+00:00https://nhimg.org/faq/you-detect-conditional-access-policy-changes-unapproved-actors-microsoft-entra/2026-10-20T15:41:00+00:00https://nhimg.org/faq/you-detect-delegated-permissions-granted-all-users-microsoft-entra-id/2026-10-20T15:41:05+00:00https://nhimg.org/faq/how-do-you-detect-domain-federation-settings-changes-in-microsoft-entra-id/2026-10-20T15:41:13+00:00https://nhimg.org/faq/how-do-you-detect-guest-users-converted-to-members-in-microsoft-entra-id/2026-10-20T15:41:18+00:00https://nhimg.org/faq/you-detect-guest-users-invited-unapproved-inviters-microsoft-entra-id/2026-10-20T15:41:20+00:00https://nhimg.org/faq/how-do-you-detect-iam-privilege-escalation-activity-in-aws-cloudtrail/2026-10-20T15:41:25+00:00https://nhimg.org/faq/how-do-you-detect-identity-provider-changes-in-aws-iam-identity-center/2026-10-20T15:41:28+00:00https://nhimg.org/faq/how-do-you-detect-new-federated-domains-being-added-in-microsoft-365/2026-10-20T15:41:33+00:00https://nhimg.org/faq/how-do-you-detect-new-identity-providers-created-in-okta/2026-10-20T15:41:42+00:00https://nhimg.org/faq/how-do-you-detect-okta-network-zones-being-deactivated-or-deleted/2026-10-20T15:41:44+00:00https://nhimg.org/faq/how-do-you-detect-okta-sign-on-policy-changes/2026-10-20T15:41:48+00:00https://nhimg.org/faq/how-do-you-detect-outside-collaborators-added-to-github-repositories/2026-10-20T15:41:49+00:00https://nhimg.org/faq/how-do-you-detect-suspicious-saml-activity-in-aws/2026-10-20T15:41:53+00:00https://nhimg.org/faq/you-detect-users-added-groups-modify-conditional-access-policies/2026-10-20T15:41:57+00:00https://nhimg.org/faq/how-do-you-disable-local-key-authentication-for-azure-cosmos-db/2026-10-20T15:42:00+00:00https://nhimg.org/faq/how-do-you-enable-authentication-for-azure-function-apps/2026-10-20T15:42:06+00:00https://nhimg.org/faq/how-do-you-enable-built-in-authentication-on-azure-app-service/2026-10-20T15:42:11+00:00https://nhimg.org/faq/how-do-you-enable-iam-database-authentication-for-amazon-rds/2026-10-20T15:42:16+00:00https://nhimg.org/faq/how-do-you-enable-os-login-for-google-compute-engine-projects/2026-10-20T15:42:20+00:00https://nhimg.org/faq/how-do-you-enable-os-login-with-2fa-in-google-cloud/2026-10-20T15:42:22+00:00https://nhimg.org/faq/you-enable-saml-single-sign-enterprise-application-microsoft-entra-id/2026-10-20T15:42:27+00:00https://nhimg.org/faq/how-do-you-enable-modern-authentication-in-microsoft-365-and-why-does-it-matter/2026-10-20T15:42:30+00:00https://nhimg.org/faq/how-do-you-enforce-saml-sso-for-a-github-organisation/2026-10-20T15:42:34+00:00https://nhimg.org/faq/how-do-you-enforce-saml-sso-for-a-vercel-team/2026-10-20T15:42:37+00:00https://nhimg.org/faq/you-enforce-separation-duties-service-account-kms-roles-google-cloud/2026-10-20T15:42:45+00:00https://nhimg.org/faq/how-do-you-enforce-ssh-key-authentication-on-azure-linux-virtual-machines/2026-10-20T15:42:49+00:00https://nhimg.org/faq/how-do-you-ensure-conditional-access-policies-cover-all-users-and-cloud-apps/2026-10-20T15:42:53+00:00https://nhimg.org/faq/how-do-you-evaluate-blast-radius/2026-10-20T15:42:54+00:00https://nhimg.org/faq/you-extend-microsoft-entra-password-protection-premises-active-directory/2026-10-20T15:42:58+00:00https://nhimg.org/faq/how-do-you-find-and-disable-inactive-iam-users-in-aws/2026-10-20T15:43:00+00:00https://nhimg.org/faq/you-find-aws-iam-policies-allow-credential-exposure-data-exfiltration-privilege/2026-10-20T15:43:06+00:00https://nhimg.org/faq/how-do-you-find-gaps-in-conditional-access-coverage-in-microsoft-entra-id/2026-10-20T15:43:11+00:00https://nhimg.org/faq/how-do-you-find-gaps-in-conditional-access-policy-exclusions/2026-10-20T15:43:17+00:00https://nhimg.org/faq/how-do-you-find-sign-ins-using-legacy-authentication-in-microsoft-entra-id/2026-10-20T15:43:22+00:00https://nhimg.org/faq/how-do-you-isolate-resources-securely-within-a-single-microsoft-entra-tenant/2026-10-20T15:43:26+00:00https://nhimg.org/faq/how-do-you-migrate-ad-fs-applications-to-microsoft-entra-id/2026-10-20T15:43:30+00:00https://nhimg.org/faq/you-migrate-federation-cloud-authentication-microsoft-entra-id-staged-rollout/2026-10-20T15:43:33+00:00https://nhimg.org/faq/how-do-you-manage-and-review-exclusions-from-conditional-access-policies/2026-10-20T15:43:38+00:00https://nhimg.org/faq/how-do-you-migrate-okta-sign-on-policies-to-microsoft-entra-conditional-access/2026-10-20T15:43:42+00:00https://nhimg.org/faq/how-do-you-monitor-end-user-consent-to-applications-in-microsoft-entra-id/2026-10-20T15:43:46+00:00https://nhimg.org/faq/you-monitor-impact-conditional-access-policies-microsoft-entra-id/2026-10-20T15:43:50+00:00https://nhimg.org/faq/how-do-you-plan-a-conditional-access-deployment-in-microsoft-entra-id/2026-10-20T15:43:58+00:00https://nhimg.org/faq/you-prevent-aws-iam-policies-allowing-unconstrained-permissions-management/2026-10-20T15:44:03+00:00https://nhimg.org/faq/you-prevent-iam-policies-granting-full-administrative-privileges-aws/2026-10-20T15:44:09+00:00https://nhimg.org/faq/you-prevent-privilege-escalation-through-customer-managed-iam-policies-aws/2026-10-20T15:44:12+00:00https://nhimg.org/faq/you-prevent-ram-policies-granting-full-administrative-privileges-alibaba-cloud/2026-10-20T15:44:16+00:00https://nhimg.org/faq/how-do-you-prevent-the-confused-deputy-problem-in-aws-iam-role-trust-policies/2026-10-20T15:44:19+00:00https://nhimg.org/faq/you-protect-access-unmanaged-devices-application-enforced-restrictions/2026-10-20T15:44:24+00:00https://nhimg.org/faq/how-do-you-require-compliant-or-managed-devices-with-conditional-access/2026-10-20T15:44:31+00:00https://nhimg.org/faq/how-do-you-require-reauthentication-with-microsoft-entra-conditional-access/2026-10-20T15:44:36+00:00https://nhimg.org/faq/you-restrict-aws-lambda-resource-based-permissions-sourcearn-sourceaccount/2026-10-20T15:44:41+00:00https://nhimg.org/faq/how-do-you-restrict-device-code-flow-with-microsoft-entra-conditional-access/2026-10-20T15:44:46+00:00https://nhimg.org/faq/you-restrict-guest-invitations-external-collaboration-settings-microsoft-entra/2026-10-20T15:44:48+00:00https://nhimg.org/faq/how-do-you-restrict-guest-user-access-permissions-in-microsoft-entra-id/2026-10-20T15:44:51+00:00https://nhimg.org/faq/how-do-you-restrict-third-party-app-access-to-google-workspace-data/2026-10-20T15:44:58+00:00https://nhimg.org/faq/how-do-you-restrict-which-principals-can-assume-an-aws-iam-role/2026-10-20T15:45:01+00:00https://nhimg.org/faq/you-secure-external-access-teams-sharepoint-onedrive-microsoft-entra-id/2026-10-20T15:45:10+00:00https://nhimg.org/faq/you-secure-external-user-access-conditional-access-microsoft-entra-id/2026-10-20T15:45:17+00:00https://nhimg.org/faq/you-secure-legacy-premises-apps-microsoft-entra-secure-hybrid-access/2026-10-20T15:45:21+00:00https://nhimg.org/faq/you-set-up-saml-ws-fed-identity-provider-federation-microsoft-entra-b2b/2026-10-20T15:45:24+00:00https://nhimg.org/faq/how-do-you-sign-in-to-azure-linux-vms-with-microsoft-entra-id-and-openssh/2026-10-20T15:45:29+00:00https://nhimg.org/faq/how-do-you-sign-in-to-azure-windows-vms-with-microsoft-entra-id/2026-10-20T15:45:34+00:00https://nhimg.org/faq/you-stop-non-admin-users-creating-groups-microsoft-entra-id-microsoft-365/2026-10-20T15:45:36+00:00https://nhimg.org/faq/how-do-you-strengthen-federated-sign-in-security-in-microsoft-entra-id/2026-10-20T15:45:42+00:00https://nhimg.org/faq/how-do-you-use-conditions-in-microsoft-entra-conditional-access-policies/2026-10-20T15:45:46+00:00https://nhimg.org/faq/how-do-you-use-multiple-microsoft-entra-tenants-to-isolate-resources-securely/2026-10-20T15:45:50+00:00https://nhimg.org/faq/how-do-you-use-the-conditional-access-what-if-tool-in-microsoft-entra-id/2026-10-20T15:45:57+00:00https://nhimg.org/faq/you-validate-token-claims-secure-applications-apis-microsoft-entra-id/2026-10-20T15:46:00+00:00https://nhimg.org/faq/how-does-account-recovery-work-in-microsoft-entra-id/2026-10-20T15:46:03+00:00https://nhimg.org/faq/how-does-microsoft-entra-id-check-for-weak-and-banned-passwords/2026-10-20T15:46:07+00:00https://nhimg.org/faq/how-does-microsoft-entra-id-protect-tokens-against-theft-and-replay/2026-10-20T15:46:14+00:00https://nhimg.org/faq/how-does-insider-risk-in-microsoft-entra-conditional-access-protect-your-tenant/2026-10-20T15:46:18+00:00https://nhimg.org/faq/how-does-saml-single-sign-on-work-with-microsoft-entra-id/2026-10-20T15:46:22+00:00https://nhimg.org/faq/how-does-shibboleth-sp-protect-against-csrf/2026-10-20T15:46:24+00:00https://nhimg.org/faq/microsoft-entra-smart-lockout-protect-against-password-spray-brute-force-attacks/2026-10-20T15:46:26+00:00https://nhimg.org/faq/how-does-the-compliant-network-check-work-in-microsoft-entra-conditional-access/2026-10-20T15:46:30+00:00https://nhimg.org/faq/how-does-the-oauth-20-authorisation-code-flow-work-with-microsoft-entra-id/2026-10-20T15:46:35+00:00https://nhimg.org/faq/how-does-the-oauth-on-behalf-of-obo-flow-work-between-systems/2026-10-20T15:46:47+00:00https://nhimg.org/faq/token-protection-conditional-access-help-prevent-token-theft-microsoft-entra-id/2026-10-20T15:46:50+00:00https://nhimg.org/faq/how-does-the-oauth-20-on-behalf-of-flow-work-in-microsoft-entra-id/2026-10-20T15:46:53+00:00https://nhimg.org/faq/how-long-does-microsoft-entra-id-retain-sign-in-and-audit-logs/2026-10-20T15:46:58+00:00https://nhimg.org/faq/oauth-20-device-code-flow-abused-phishing-you-prevent-it-entra-id/2026-10-20T15:47:01+00:00https://nhimg.org/faq/what-are-best-practices-for-securing-b2b-guest-access-in-microsoft-entra-id/2026-10-20T15:47:06+00:00https://nhimg.org/faq/security-best-practices-redirect-uris-microsoft-entra-app-registrations/2026-10-20T15:47:09+00:00https://nhimg.org/faq/what-are-the-security-risks-of-password-sharing-within-teams/2026-10-20T15:47:09+00:00https://nhimg.org/faq/what-is-the-difference-between-a-bearer-token-and-a-client-secret/2026-10-20T15:47:21+00:00https://nhimg.org/faq/difference-between-authentication-authorisation-microsoft-entra-id/2026-10-20T15:47:25+00:00https://nhimg.org/faq/what-is-the-difference-between-identity-and-credentials/2026-10-20T15:47:28+00:00https://nhimg.org/faq/difference-between-public-confidential-client-apps-microsoft-msal/2026-10-20T15:47:34+00:00https://nhimg.org/faq/difference-between-single-tenant-multitenant-apps-microsoft-entra-id/2026-10-20T15:47:37+00:00https://nhimg.org/faq/why-is-offline-password-cracking-dangerous/2026-10-20T15:47:37+00:00https://nhimg.org/faq/why-should-amazon-s3-bucket-policies-not-allow-actions-for-any-principal/2026-10-20T15:47:39+00:00https://nhimg.org/faq/oauth-20-resource-owner-password-credentials-flow-risky-microsoft-entra-id/2026-10-20T15:47:44+00:00https://nhimg.org/faq/why-should-aws-access-be-managed-through-sso-rather-than-iam-users/2026-10-20T15:47:49+00:00https://nhimg.org/faq/why-should-aws-iam-policies-be-attached-to-groups-or-roles-rather-than-users/2026-10-20T15:47:51+00:00https://nhimg.org/faq/why-should-aws-iam-policies-never-grant-full-administrative-privileges/2026-10-20T15:47:56+00:00https://nhimg.org/faq/why-should-aws-kms-key-policies-avoid-wildcard-principals/2026-10-20T15:48:02+00:00https://nhimg.org/faq/why-should-basic-roles-such-as-owner-and-editor-be-avoided-in-google-cloud-iam/2026-10-20T15:48:06+00:00https://nhimg.org/faq/why-should-azure-linux-vms-use-ssh-keys-instead-of-password-authentication/2026-10-20T15:48:09+00:00https://nhimg.org/faq/why-should-less-secure-app-access-be-disabled-in-google-workspace/2026-10-20T15:48:11+00:00https://nhimg.org/faq/local-authentication-disabled-azure-services-such-event-grid-cognitive-services/2026-10-20T15:48:14+00:00https://nhimg.org/faq/why-should-personal-google-accounts-not-be-granted-roles-in-google-cloud-iam/2026-10-20T15:48:19+00:00https://nhimg.org/faq/why-should-oauth2-implicit-and-password-flows-be-avoided-in-openapi-definitions/2026-10-20T15:48:21+00:00https://nhimg.org/faq/why-should-shared-key-access-be-disabled-on-azure-storage-accounts/2026-10-20T15:48:26+00:00https://nhimg.org/faq/why-should-sign-in-be-blocked-for-shared-mailboxes-in-microsoft-365/2026-10-20T15:48:32+00:00https://nhimg.org/faq/why-should-the-aws-root-account-have-no-active-access-keys/2026-10-20T15:48:37+00:00https://nhimg.org/faq/why-should-the-aws-root-user-not-be-used-for-everyday-tasks/2026-10-20T15:48:41+00:00https://nhimg.org/faq/why-should-the-alibaba-cloud-root-account-have-no-access-keys/2026-10-20T15:48:43+00:00https://nhimg.org/faq/why-should-the-local-admin-account-be-disabled-in-azure-kubernetes-service/2026-10-20T15:48:46+00:00https://nhimg.org/faq/why-should-the-oauth-20-implicit-grant-flow-be-avoided-in-microsoft-entra-id/2026-10-20T15:48:51+00:00https://nhimg.org/faq/approvers-handle-access-package-requests-microsoft-entra-entitlement-management/2026-10-20T15:48:58+00:00https://nhimg.org/faq/why-should-you-migrate-applications-from-ad-fs-to-microsoft-entra-id/2026-10-20T15:49:00+00:00https://nhimg.org/faq/is-a-password-used-for-identity-proofing-or-authentication/2026-10-20T15:49:05+00:00https://nhimg.org/faq/how-do-you-automate-access-reviews-for-microsoft-teams/2026-10-20T15:49:11+00:00https://nhimg.org/faq/you-automate-joiner-mover-leaver-tasks-microsoft-entra-lifecycle-workflows/2026-10-20T15:49:14+00:00https://nhimg.org/faq/how-do-you-automate-removal-of-inactive-guest-users-in-microsoft-entra-id/2026-10-20T15:49:16+00:00https://nhimg.org/faq/how-do-you-automatically-deactivate-inactive-users-in-okta/2026-10-20T15:49:19+00:00https://nhimg.org/faq/how-do-you-build-a-scim-endpoint-for-user-provisioning-from-microsoft-entra-id/2026-10-20T15:49:23+00:00https://nhimg.org/faq/how-do-you-detect-activity-performed-by-terminated-users-in-microsoft-365/2026-10-20T15:49:28+00:00https://nhimg.org/faq/how-do-you-enforce-least-privilege-with-microsoft-entra-id-governance/2026-10-20T15:49:32+00:00https://nhimg.org/faq/you-enforce-separation-duties-microsoft-entra-entitlement-management/2026-10-20T15:49:37+00:00https://nhimg.org/faq/how-do-you-evaluate-modern-versus-legacy-iga-capabilities/2026-10-20T15:49:44+00:00https://nhimg.org/faq/how-do-you-find-and-manage-inactive-user-accounts-in-microsoft-entra-id/2026-10-20T15:49:48+00:00https://nhimg.org/faq/you-prepare-microsoft-entra-access-review-users-access-application/2026-10-20T15:49:51+00:00https://nhimg.org/faq/you-review-remove-external-users-who-no-longer-need-access-microsoft-entra-id/2026-10-20T15:49:56+00:00https://nhimg.org/faq/you-set-up-access-reviews-guests-privileged-roles-microsoft-entra-id/2026-10-20T15:50:02+00:00https://nhimg.org/faq/you-review-access-groups-applications-microsoft-entra-access-reviews/2026-10-20T15:50:09+00:00https://nhimg.org/faq/automatic-user-provisioning-saas-applications-work-microsoft-entra-id/2026-10-20T15:50:12+00:00https://nhimg.org/faq/how-does-scim-provisioning-work-with-microsoft-entra-id/2026-10-20T15:50:19+00:00https://nhimg.org/faq/what-are-examples-of-iga-governance-controls/2026-10-20T15:50:21+00:00https://nhimg.org/faq/what-iga-features-matter-most-in-2026/2026-10-20T15:50:25+00:00https://nhimg.org/faq/what-is-the-difference-between-segregation-of-duties-and-separation-of-duties/2026-10-20T15:50:28+00:00https://nhimg.org/faq/why-do-segregation-of-duties-sod-checks-fail/2026-10-20T15:50:32+00:00https://nhimg.org/faq/how-do-you-configure-continuous-identity-discovery/2026-10-20T15:50:35+00:00https://nhimg.org/faq/how-do-you-monitor-configuration-drift-in-a-microsoft-entra-tenant/2026-10-20T15:50:39+00:00https://nhimg.org/faq/how-do-you-configure-risk-policies-in-microsoft-entra-id-protection/2026-10-20T15:50:42+00:00https://nhimg.org/faq/you-detect-temporary-access-pass-being-added-account-microsoft-entra-id/2026-10-20T15:50:47+00:00https://nhimg.org/faq/you-detect-accounts-created-deleted-within-short-time-microsoft-entra-id/2026-10-20T15:50:50+00:00https://nhimg.org/faq/how-do-you-detect-active-directory-database-dumping-with-ntdsutil/2026-10-20T15:50:53+00:00https://nhimg.org/faq/how-do-you-detect-azurehound-discovery-activity-in-microsoft-entra-id/2026-10-20T15:50:58+00:00https://nhimg.org/faq/how-do-you-detect-aadinternals-powershell-cmdlets-targeting-microsoft-entra-id/2026-10-20T15:51:02+00:00https://nhimg.org/faq/how-do-you-detect-browser-cookie-theft-for-session-hijacking-on-windows/2026-10-20T15:51:07+00:00https://nhimg.org/faq/how-do-you-detect-changes-to-federation-configuration-in-microsoft-entra-id/2026-10-20T15:51:09+00:00https://nhimg.org/faq/how-do-you-detect-device-code-authentication-flow-use-in-microsoft-entra-id/2026-10-20T15:51:18+00:00https://nhimg.org/faq/how-do-you-detect-changes-to-user-authentication-methods-in-microsoft-entra-id/2026-10-20T15:51:20+00:00https://nhimg.org/faq/how-do-you-detect-device-registration-without-mfa-in-microsoft-entra-id/2026-10-20T15:51:25+00:00https://nhimg.org/faq/how-do-you-detect-encrypting-file-system-rpc-abuse-such-as-petitpotam-on-windows/2026-10-20T15:51:27+00:00https://nhimg.org/faq/how-do-you-detect-kerberoasting-through-rc4-ticket-requests/2026-10-20T15:51:33+00:00https://nhimg.org/faq/how-do-you-detect-kerberos-relay-attacks-such-as-krbrelayup-on-windows/2026-10-20T15:51:35+00:00https://nhimg.org/faq/how-do-you-detect-impacket-secretsdump-remote-credential-dumping/2026-10-20T15:51:39+00:00https://nhimg.org/faq/how-do-you-detect-mfa-being-disabled-for-user-accounts-in-microsoft-entra-id/2026-10-20T15:51:43+00:00https://nhimg.org/faq/you-detect-microsoft-365-activity-anonymous-suspicious-ip-addresses/2026-10-20T15:51:47+00:00https://nhimg.org/faq/how-do-you-detect-mfa-being-disabled-in-google-workspace/2026-10-20T15:51:54+00:00https://nhimg.org/faq/how-do-you-detect-ntlm-brute-force-attacks-on-windows-domains/2026-10-20T15:51:58+00:00https://nhimg.org/faq/how-do-you-detect-ntlm-coercion-attacks-such-as-petitpotam-and-printerbug/2026-10-20T15:51:59+00:00https://nhimg.org/faq/how-do-you-detect-okta-sessions-started-via-anonymising-proxies/2026-10-20T15:52:03+00:00https://nhimg.org/faq/how-do-you-detect-nopac-samaccountname-spoofing-attacks-in-active-directory/2026-10-20T15:52:07+00:00https://nhimg.org/faq/how-do-you-detect-overpass-the-hash-attacks-in-active-directory/2026-10-20T15:52:11+00:00https://nhimg.org/faq/you-detect-password-spray-against-ad-fs-microsoft-entra-connect-health-risky-ip/2026-10-20T15:52:13+00:00https://nhimg.org/faq/how-do-you-detect-pass-the-hash-attacks-on-windows/2026-10-20T15:52:17+00:00https://nhimg.org/faq/you-detect-primary-refresh-token-access-attempts-microsoft-entra-joined-devices/2026-10-20T15:52:23+00:00https://nhimg.org/faq/how-do-you-detect-primary-refresh-token-theft-through-azure-browser-sso-abuse/2026-10-20T15:52:27+00:00https://nhimg.org/faq/how-do-you-detect-rubeus-kerberos-attacks-on-windows/2026-10-20T15:52:29+00:00https://nhimg.org/faq/how-do-you-detect-sharphound-and-bloodhound-reconnaissance-in-active-directory/2026-10-20T15:52:37+00:00https://nhimg.org/faq/how-do-you-detect-sign-ins-from-anonymous-ip-addresses-in-microsoft-entra-id/2026-10-20T15:52:40+00:00https://nhimg.org/faq/how-do-you-detect-sign-ins-from-malicious-ip-addresses-in-microsoft-entra-id/2026-10-20T15:52:43+00:00https://nhimg.org/faq/how-do-you-detect-saml-token-issuer-anomalies-in-microsoft-entra-id/2026-10-20T15:52:45+00:00https://nhimg.org/faq/how-do-you-detect-simultaneous-or-multiple-host-logins-by-the-same-user/2026-10-20T15:52:47+00:00https://nhimg.org/faq/how-do-you-identify-suspicious-ldap-behaviour/2026-10-20T15:52:53+00:00https://nhimg.org/faq/you-perform-emergency-rotation-ad-fs-certificates-after-compromise/2026-10-20T15:52:56+00:00https://nhimg.org/faq/you-monitor-privileged-accounts-microsoft-entra-id-security-operations/2026-10-20T15:53:05+00:00https://nhimg.org/faq/you-remediate-risky-users-unblock-them-microsoft-entra-id-protection/2026-10-20T15:53:07+00:00https://nhimg.org/faq/how-do-you-review-risky-users-and-sign-ins-in-microsoft-entra-id-protection/2026-10-20T15:53:12+00:00https://nhimg.org/faq/how-do-you-revoke-a-users-access-in-an-emergency-in-microsoft-entra-id/2026-10-20T15:53:17+00:00https://nhimg.org/faq/how-does-user-self-remediation-work-in-microsoft-entra-id-protection/2026-10-20T15:53:19+00:00https://nhimg.org/faq/how-do-you-simulate-risk-detections-in-microsoft-entra-id-protection/2026-10-20T15:53:20+00:00https://nhimg.org/faq/what-causes-false-positives-in-iam-alerts/2026-10-20T15:53:23+00:00https://nhimg.org/faq/how-do-you-respond-to-a-leaked-credentials-detection-in-microsoft-entra-id/2026-10-20T15:53:27+00:00https://nhimg.org/faq/what-does-a-sign-in-attempt-to-a-disabled-account-indicate-in-microsoft-entra-id/2026-10-20T15:53:32+00:00https://nhimg.org/faq/atypical-impossible-travel-indicate-you-detect-it-microsoft-entra-id/2026-10-20T15:53:36+00:00https://nhimg.org/faq/what-risk-detection-types-does-microsoft-entra-id-protection-use/2026-10-20T15:53:45+00:00https://nhimg.org/faq/you-monitor-detect-compromised-user-accounts-microsoft-entra-id/2026-10-20T15:53:50+00:00https://nhimg.org/faq/are-security-questions-a-safe-authentication-method-in-microsoft-entra-id/2026-10-20T15:53:54+00:00https://nhimg.org/faq/what-is-microsoft-entra-id-protection-and-what-risks-does-it-detect/2026-10-20T15:53:56+00:00https://nhimg.org/faq/conditional-access-authentication-strengths-work-external-users-microsoft-entra/2026-10-20T15:53:59+00:00https://nhimg.org/faq/how-do-nist-authenticator-assurance-levels-map-to-conditional-access/2026-10-20T15:54:02+00:00https://nhimg.org/faq/you-monitor-detect-attacks-microsoft-entra-hybrid-identity-infrastructure/2026-10-20T15:54:07+00:00https://nhimg.org/faq/microsoft-entra-authentication-methods-map-nist-authenticator-assurance-levels/2026-10-20T15:54:10+00:00https://nhimg.org/faq/how-do-you-add-microsoft-entra-mfa-to-vpn-and-radius-with-the-nps-extension/2026-10-20T15:54:17+00:00https://nhimg.org/faq/how-do-you-balance-mfa-prompts-and-session-lifetime-in-microsoft-entra-id/2026-10-20T15:54:26+00:00https://nhimg.org/faq/how-do-you-configure-multifactor-authentication-settings-in-microsoft-entra-id/2026-10-20T15:54:30+00:00https://nhimg.org/faq/you-create-custom-authentication-strengths-microsoft-entra-conditional-access/2026-10-20T15:54:34+00:00https://nhimg.org/faq/how-do-you-configure-certificate-based-authentication-in-microsoft-entra-id/2026-10-20T15:54:37+00:00https://nhimg.org/faq/how-do-you-detect-cisco-duo-mfa-bypass-code-use/2026-10-20T15:54:43+00:00https://nhimg.org/faq/how-do-you-detect-mfa-bypass-using-legacy-authentication-in-microsoft-entra-id/2026-10-20T15:54:46+00:00https://nhimg.org/faq/how-do-you-detect-okta-mfa-being-reset-or-deactivated/2026-10-20T15:54:51+00:00https://nhimg.org/faq/how-do-you-enable-mfa-for-iam-users-in-huawei-cloud/2026-10-20T15:54:53+00:00https://nhimg.org/faq/how-do-you-enforce-2-step-verification-for-all-users-in-google-workspace/2026-10-20T15:55:00+00:00https://nhimg.org/faq/how-do-you-enable-passkeys-for-sign-in-to-microsoft-entra-id/2026-10-20T15:55:03+00:00https://nhimg.org/faq/how-do-you-enforce-mfa-for-alibaba-cloud-ram-users/2026-10-20T15:55:09+00:00https://nhimg.org/faq/how-do-you-enforce-mfa-for-iam-users-in-aws/2026-10-20T15:55:14+00:00https://nhimg.org/faq/how-do-you-enforce-mfa-for-mongodb-atlas-organisation-users/2026-10-20T15:55:16+00:00https://nhimg.org/faq/you-enforce-mfa-okta-authentication-policies-dashboard-apps/2026-10-20T15:55:21+00:00https://nhimg.org/faq/how-do-you-enforce-multifactor-authentication-for-all-users-in-microsoft-365/2026-10-20T15:55:27+00:00https://nhimg.org/faq/how-do-you-enforce-mfa-for-oracle-cloud-console-users/2026-10-20T15:55:30+00:00https://nhimg.org/faq/you-enforce-phishing-resistant-mfa-session-timeouts-okta-admin-console/2026-10-20T15:55:33+00:00https://nhimg.org/faq/you-find-administrators-without-strong-authentication-microsoft-entra-id/2026-10-20T15:55:38+00:00https://nhimg.org/faq/how-do-you-find-sign-ins-not-protected-by-mfa-in-microsoft-entra-id/2026-10-20T15:55:42+00:00https://nhimg.org/faq/how-do-you-manage-authentication-methods-in-microsoft-entra-id/2026-10-20T15:55:48+00:00https://nhimg.org/faq/how-do-you-migrate-to-the-authentication-methods-policy-in-microsoft-entra-id/2026-10-20T15:55:51+00:00https://nhimg.org/faq/you-plan-phishing-resistant-passwordless-deployment-microsoft-entra-id/2026-10-20T15:55:57+00:00https://nhimg.org/faq/how-do-you-protect-authentication-methods-in-microsoft-entra-id-from-tampering/2026-10-20T15:56:03+00:00https://nhimg.org/faq/how-do-you-remove-passwords-and-go-passwordless-in-microsoft-entra-id/2026-10-20T15:56:07+00:00https://nhimg.org/faq/you-require-managed-device-mfa-registration-microsoft-entra-conditional-access/2026-10-20T15:56:11+00:00https://nhimg.org/faq/how-do-you-register-and-use-fido2-passkeys-in-microsoft-entra-id/2026-10-20T15:56:15+00:00https://nhimg.org/faq/you-require-mfa-administrators-microsoft-entra-conditional-access/2026-10-20T15:56:19+00:00https://nhimg.org/faq/how-do-you-require-mfa-for-all-users-with-microsoft-entra-conditional-access/2026-10-20T15:56:23+00:00https://nhimg.org/faq/you-require-mfa-azure-management-microsoft-entra-conditional-access/2026-10-20T15:56:28+00:00https://nhimg.org/faq/how-do-you-require-mfa-for-microsoft-admin-portals-with-conditional-access/2026-10-20T15:56:33+00:00https://nhimg.org/faq/you-require-phishing-resistant-mfa-administrators-microsoft-entra-id/2026-10-20T15:56:40+00:00https://nhimg.org/faq/how-do-you-require-two-factor-authentication-for-a-github-organisation/2026-10-20T15:56:45+00:00https://nhimg.org/faq/you-run-passkey-microsoft-authenticator-registration-campaign-microsoft-entra-id/2026-10-20T15:56:50+00:00https://nhimg.org/faq/how-do-you-secure-mfa-registration-with-conditional-access-in-microsoft-entra-id/2026-10-20T15:56:55+00:00https://nhimg.org/faq/how-do-you-set-up-microsoft-entra-passkey-sign-in-on-windows/2026-10-20T15:56:59+00:00https://nhimg.org/faq/how-do-you-use-microsoft-entra-mfa-with-nps-for-radius-and-vpn-access/2026-10-20T15:57:02+00:00https://nhimg.org/faq/combined-security-information-registration-work-mfa-sspr-microsoft-entra-id/2026-10-20T15:57:07+00:00https://nhimg.org/faq/how-does-microsoft-entra-multifactor-authentication-work/2026-10-20T15:57:11+00:00https://nhimg.org/faq/how-does-number-matching-in-microsoft-authenticator-prevent-mfa-fatigue-attacks/2026-10-20T15:57:18+00:00https://nhimg.org/faq/qr-code-authentication-work-microsoft-entra-id-you-use-it/2026-10-20T15:57:24+00:00https://nhimg.org/faq/windows-hello-business-work-authentication-method-microsoft-entra-id/2026-10-20T15:57:28+00:00https://nhimg.org/faq/showing-app-name-location-microsoft-authenticator-help-stop-mfa-fatigue-attacks/2026-10-20T15:57:32+00:00https://nhimg.org/faq/you-prepare-mandatory-mfa-azure-management-portals-microsoft-entra-id/2026-10-20T15:57:35+00:00https://nhimg.org/faq/is-certificate-based-authentication-cba-phishing-resistant/2026-10-20T15:57:38+00:00https://nhimg.org/faq/what-are-the-risks-of-sms-based-user-sign-in-in-microsoft-entra-id/2026-10-20T15:57:43+00:00https://nhimg.org/faq/repeated-mfa-denials-indicate-you-detect-mfa-fatigue-microsoft-entra-id/2026-10-20T15:57:47+00:00https://nhimg.org/faq/what-does-an-okta-fastpass-phishing-detection-indicate-and-how-do-you-respond/2026-10-20T15:57:50+00:00https://nhimg.org/faq/why-is-legacy-mfa-being-targeted-by-attackers/2026-10-20T15:57:58+00:00https://nhimg.org/faq/what-passwordless-authentication-options-does-microsoft-entra-id-support/2026-10-20T15:58:02+00:00https://nhimg.org/faq/why-is-microsoft-retiring-sms-and-voice-authentication-in-microsoft-entra-id/2026-10-20T15:58:05+00:00https://nhimg.org/faq/sms-voice-authentication-methods-disabled-microsoft-entra-id/2026-10-20T15:58:10+00:00https://nhimg.org/faq/you-move-per-user-mfa-conditional-access-microsoft-entra-id/2026-10-20T15:58:15+00:00https://nhimg.org/faq/why-should-you-require-mfa-for-device-registration-in-microsoft-entra-id/2026-10-20T15:58:18+00:00https://nhimg.org/faq/how-can-dns-rules-block-phishing/2026-10-20T15:58:21+00:00https://nhimg.org/faq/you-enable-additional-context-microsoft-authenticator-notifications/2026-10-20T15:58:25+00:00https://nhimg.org/faq/how-do-you-configure-promiscuous-mode-on-a-nic/2026-10-20T15:58:28+00:00https://nhimg.org/faq/how-do-you-protect-domain-controllers-with-microsoft-entra-private-access/2026-10-20T15:58:33+00:00https://nhimg.org/faq/how-do-you-secure-remote-desktop-gateway-with-microsoft-entra-id/2026-10-20T15:58:39+00:00https://nhimg.org/faq/what-is-the-difference-between-a-proxy-and-a-reverse-proxy/2026-10-20T15:58:45+00:00https://nhimg.org/faq/you-publish-premises-applications-securely-microsoft-entra-application-proxy/2026-10-20T15:58:49+00:00https://nhimg.org/faq/what-should-be-placed-in-a-dmz/2026-10-20T15:58:50+00:00https://nhimg.org/faq/which-network-protocols-are-deprecated-for-security-reasons/2026-10-20T15:58:52+00:00https://nhimg.org/faq/do-non-human-identities-outnumber-human-users/2026-10-20T15:58:55+00:00https://nhimg.org/faq/how-are-gmsa-credentials-handled/2026-10-20T15:58:57+00:00https://nhimg.org/faq/what-ddos-attacks-have-been-attributed-to-iran/2026-10-20T15:58:59+00:00https://nhimg.org/faq/how-are-non-human-identities-managed-in-azure/2026-10-20T15:59:03+00:00https://nhimg.org/faq/how-do-applications-authenticate-to-microsoft-entra-id-using-their-own-identity/2026-10-20T15:59:08+00:00https://nhimg.org/faq/you-change-ad-ds-connector-account-password-used-microsoft-entra-connect-sync/2026-10-20T15:59:15+00:00https://nhimg.org/faq/you-authenticate-application-microsoft-entra-id-certificate-instead-client/2026-10-20T15:59:19+00:00https://nhimg.org/faq/how-do-you-avoid-user-managed-service-account-keys-in-google-cloud/2026-10-20T15:59:21+00:00https://nhimg.org/faq/how-do-you-add-and-manage-app-credentials-securely-in-microsoft-entra-id/2026-10-20T15:59:25+00:00https://nhimg.org/faq/how-do-you-detect-application-uri-configuration-changes-in-microsoft-entra-id/2026-10-20T15:59:29+00:00https://nhimg.org/faq/how-do-you-deactivate-a-compromised-app-registration-in-microsoft-entra-id/2026-10-20T15:59:31+00:00https://nhimg.org/faq/how-do-you-detect-apps-being-granted-privileged-microsoft-graph-permissions/2026-10-20T15:59:37+00:00https://nhimg.org/faq/you-detect-applications-assigned-privileged-azure-rbac-microsoft-entra-roles/2026-10-20T15:59:39+00:00https://nhimg.org/faq/how-do-you-detect-aws-sts-assumerole-and-session-token-misuse/2026-10-20T15:59:49+00:00https://nhimg.org/faq/how-do-you-detect-backdoor-iam-access-keys-being-created-for-other-aws-users/2026-10-20T15:59:53+00:00https://nhimg.org/faq/you-detect-credentials-being-added-existing-microsoft-entra-application/2026-10-20T15:59:56+00:00https://nhimg.org/faq/how-do-you-detect-domain-wide-api-access-being-granted-in-google-workspace/2026-10-20T16:00:01+00:00https://nhimg.org/faq/how-do-you-detect-kubernetes-service-accounts-being-created-or-modified/2026-10-20T16:00:08+00:00https://nhimg.org/faq/you-detect-google-cloud-service-accounts-being-modified-disabled-deleted/2026-10-20T16:00:12+00:00https://nhimg.org/faq/how-do-you-detect-new-owners-being-added-to-microsoft-entra-applications/2026-10-20T16:00:14+00:00https://nhimg.org/faq/how-do-you-detect-new-service-principals-being-created-in-azure/2026-10-20T16:00:21+00:00https://nhimg.org/faq/how-do-you-detect-suspicious-oauth-app-file-download-activity-in-microsoft-365/2026-10-20T16:00:28+00:00https://nhimg.org/faq/how-do-you-detect-okta-api-token-creation-and-revocation/2026-10-20T16:00:31+00:00https://nhimg.org/faq/you-find-remove-unused-privileged-api-permissions-entra-app-registrations/2026-10-20T16:00:38+00:00https://nhimg.org/faq/how-do-you-find-and-revoke-stale-vercel-api-tokens/2026-10-20T16:00:43+00:00https://nhimg.org/faq/you-find-microsoft-entra-app-registrations-expiring-secrets-certificates/2026-10-20T16:00:46+00:00https://nhimg.org/faq/how-do-you-govern-on-premises-active-directory-service-accounts/2026-10-20T16:00:49+00:00https://nhimg.org/faq/how-do-you-discover-dormant-non-human-identities/2026-10-20T16:00:51+00:00https://nhimg.org/faq/how-do-you-govern-service-accounts-in-microsoft-entra-id/2026-10-20T16:01:00+00:00https://nhimg.org/faq/you-investigate-unexpected-service-principal-was-created-microsoft-entra-tenant/2026-10-20T16:01:02+00:00https://nhimg.org/faq/how-do-you-manage-and-rotate-iam-user-access-keys-in-aws/2026-10-20T16:01:09+00:00https://nhimg.org/faq/how-do-you-manage-azure-storage-account-access-key-rotation-and-expiry/2026-10-20T16:01:15+00:00https://nhimg.org/faq/how-do-you-manage-ssh-identities-at-scale/2026-10-20T16:01:17+00:00https://nhimg.org/faq/how-do-you-monitor-service-principal-sign-in-logs-in-microsoft-entra-id/2026-10-20T16:01:20+00:00https://nhimg.org/faq/how-do-you-register-a-microsoft-entra-app-and-create-a-service-principal/2026-10-20T16:01:24+00:00https://nhimg.org/faq/how-do-you-register-an-application-securely-in-microsoft-entra-id/2026-10-20T16:01:30+00:00https://nhimg.org/faq/you-replace-long-lived-iam-user-credentials-temporary-credentials-aws/2026-10-20T16:01:34+00:00https://nhimg.org/faq/you-restrict-app-registrations-configured-microsoft-entra-id/2026-10-20T16:01:37+00:00https://nhimg.org/faq/how-do-you-restrict-password-credentials-on-microsoft-entra-applications/2026-10-20T16:01:41+00:00https://nhimg.org/faq/how-do-you-rotate-ram-user-access-keys-in-alibaba-cloud/2026-10-20T16:01:46+00:00https://nhimg.org/faq/how-do-you-rotate-api-keys-auth-tokens-and-secret-keys-for-oracle-cloud-users/2026-10-20T16:01:50+00:00https://nhimg.org/faq/how-do-you-scope-application-access-to-exchange-online-mailboxes/2026-10-20T16:01:54+00:00https://nhimg.org/faq/how-do-you-secure-kubernetes-service-account-token-validation-on-the-api-server/2026-10-20T16:02:00+00:00https://nhimg.org/faq/how-do-you-secure-managed-service-accounts-in-active-directory/2026-10-20T16:02:04+00:00https://nhimg.org/faq/how-do-you-secure-okta-api-tokens/2026-10-20T16:02:09+00:00https://nhimg.org/faq/how-do-you-secure-user-based-service-accounts-in-active-directory/2026-10-20T16:02:12+00:00https://nhimg.org/faq/how-do-you-set-a-read-only-default-github-token-for-github-actions-workflows/2026-10-20T16:02:17+00:00https://nhimg.org/faq/you-use-certificate-credentials-instead-client-secrets-apps-microsoft-entra-id/2026-10-20T16:02:21+00:00https://nhimg.org/faq/how-do-you-use-group-managed-service-accounts-in-microsoft-entra-domain-services/2026-10-20T16:02:26+00:00https://nhimg.org/faq/how-does-app-only-access-with-client-credentials-work-in-microsoft-entra-id/2026-10-20T16:02:30+00:00https://nhimg.org/faq/how-does-tls-relate-to-non-human-identities/2026-10-20T16:02:38+00:00https://nhimg.org/faq/is-the-nhi-management-group-certification-accredited/2026-10-20T16:02:41+00:00https://nhimg.org/faq/how-does-kyc-apply-to-non-human-identities/2026-10-20T16:02:43+00:00https://nhimg.org/faq/how-should-ai-service-account-tokens-be-managed/2026-10-20T16:02:46+00:00https://nhimg.org/faq/is-there-a-non-human-identity-architect-certification/2026-10-20T16:02:52+00:00https://nhimg.org/faq/what-are-non-human-identity-nhi-security-best-practices/2026-10-20T16:02:56+00:00https://nhimg.org/faq/what-are-the-main-risks-of-non-human-identities/2026-10-20T16:03:00+00:00https://nhimg.org/faq/what-are-the-security-best-practices-for-microsoft-entra-application-properties/2026-10-20T16:03:05+00:00https://nhimg.org/faq/difference-between-app-registration-service-principal-microsoft-entra-id/2026-10-20T16:03:09+00:00https://nhimg.org/faq/accounts-permissions-microsoft-entra-connect-use-you-secure-them/2026-10-20T16:03:12+00:00https://nhimg.org/faq/what-non-human-identity-certifications-are-available/2026-10-20T16:03:15+00:00https://nhimg.org/faq/you-monitor-detect-application-service-principal-abuse-microsoft-entra-id/2026-10-20T16:03:20+00:00https://nhimg.org/faq/what-training-courses-are-available-for-non-human-identity-security/2026-10-20T16:03:25+00:00https://nhimg.org/faq/types-service-accounts-exist-active-directory-you-secure-them/2026-10-20T16:03:27+00:00https://nhimg.org/faq/when-should-you-use-technical-users/2026-10-20T16:03:30+00:00https://nhimg.org/faq/why-should-compute-engine-vms-avoid-the-default-service-account-in-google-cloud/2026-10-20T16:03:36+00:00https://nhimg.org/faq/why-should-default-service-accounts-not-be-used-in-google-cloud/2026-10-20T16:03:40+00:00https://nhimg.org/faq/entra-application-registrations-use-certificates-instead-client-secrets/2026-10-20T16:03:46+00:00https://nhimg.org/faq/non-admin-users-blocked-registering-applications-microsoft-entra-id/2026-10-20T16:03:49+00:00https://nhimg.org/faq/why-should-privileged-service-principals-in-microsoft-entra-id-have-no-owners/2026-10-20T16:03:52+00:00https://nhimg.org/faq/roles-allow-service-account-impersonation-restricted-google-cloud/2026-10-20T16:03:58+00:00https://nhimg.org/faq/why-should-google-cloud-service-accounts-not-have-administrative-privileges/2026-10-20T16:04:01+00:00https://nhimg.org/faq/service-principals-tier-0-roles-use-certificates-instead-client-secrets/2026-10-20T16:04:05+00:00https://nhimg.org/faq/why-should-the-oracle-cloud-tenancy-administrator-have-no-api-keys/2026-10-20T16:04:07+00:00https://nhimg.org/faq/users-not-hold-service-account-user-token-creator-roles-project-level-google/2026-10-20T16:04:13+00:00https://nhimg.org/faq/why-should-you-remove-unused-applications-from-your-microsoft-entra-tenant/2026-10-20T16:04:17+00:00https://nhimg.org/faq/why-should-you-remove-unused-credentials-from-microsoft-entra-applications/2026-10-20T16:04:25+00:00https://nhimg.org/faq/how-do-you-defend-ot-networks/2026-10-20T16:04:27+00:00https://nhimg.org/faq/how-is-the-pki-lifecycle-managed-for-iot-devices/2026-10-20T16:04:30+00:00https://nhimg.org/faq/what-are-the-risks-of-a-compromised-automotive-gateway-ecu/2026-10-20T16:04:33+00:00https://nhimg.org/faq/why-are-ot-controllers-still-exposed-to-the-internet/2026-10-20T16:04:36+00:00https://nhimg.org/faq/what-are-the-risks-of-unintentionally-exposed-wallet-encryption-keys/2026-10-20T16:04:40+00:00https://nhimg.org/faq/what-is-the-difference-between-privacy-tokens-and-privacy-mixers/2026-10-20T16:04:43+00:00https://nhimg.org/faq/how-do-you-activate-group-membership-or-ownership-in-microsoft-entra-pim/2026-10-20T16:04:45+00:00https://nhimg.org/faq/how-do-you-apply-pam-controls-in-devops/2026-10-20T16:04:52+00:00https://nhimg.org/faq/you-approve-deny-privileged-identity-management-activation-requests-microsoft/2026-10-20T16:04:54+00:00https://nhimg.org/faq/how-do-you-assign-microsoft-entra-administrator-roles-following-least-privilege/2026-10-20T16:04:57+00:00https://nhimg.org/faq/how-do-you-configure-activation-settings-for-roles-in-microsoft-entra-pim/2026-10-20T16:05:02+00:00https://nhimg.org/faq/you-build-resilient-access-control-strategy-emergency-access-accounts-microsoft/2026-10-20T16:05:08+00:00https://nhimg.org/faq/how-do-you-detect-aws-root-account-credential-usage/2026-10-20T16:05:11+00:00https://nhimg.org/faq/how-do-you-audit-privileged-identity-management-activity-in-microsoft-entra-id/2026-10-20T16:05:15+00:00https://nhimg.org/faq/you-detect-accounts-being-added-sysadmin-role-microsoft-sql-server/2026-10-20T16:05:17+00:00https://nhimg.org/faq/how-do-you-detect-changes-to-pim-settings-in-microsoft-entra-id/2026-10-20T16:05:22+00:00https://nhimg.org/faq/you-detect-azure-subscription-permission-elevation-global-administrators/2026-10-20T16:05:25+00:00https://nhimg.org/faq/how-do-you-detect-okta-admin-role-assignments/2026-10-20T16:05:31+00:00https://nhimg.org/faq/how-do-you-detect-privileged-account-creation-in-microsoft-entra-id/2026-10-20T16:05:37+00:00https://nhimg.org/faq/you-detect-privileged-role-activations-dont-require-mfa-microsoft-entra-pim/2026-10-20T16:05:40+00:00https://nhimg.org/faq/how-do-you-detect-users-being-added-to-privileged-groups-on-windows/2026-10-20T16:05:46+00:00https://nhimg.org/faq/how-do-you-detect-stale-accounts-in-privileged-roles-in-microsoft-entra-id/2026-10-20T16:05:49+00:00https://nhimg.org/faq/how-do-you-detect-users-being-added-to-privileged-roles-in-microsoft-entra-id/2026-10-20T16:05:53+00:00https://nhimg.org/faq/how-do-you-detect-users-being-granted-admin-privileges-in-google-workspace/2026-10-20T16:05:56+00:00https://nhimg.org/faq/how-do-you-detect-role-assignments-made-outside-pim-in-microsoft-entra-id/2026-10-20T16:06:00+00:00https://nhimg.org/faq/how-do-you-discover-excessive-privileged-role-assignments-in-microsoft-entra-pim/2026-10-20T16:06:06+00:00https://nhimg.org/faq/how-do-you-detect-windows-laps-credential-dumping-from-microsoft-entra-id/2026-10-20T16:06:12+00:00https://nhimg.org/faq/you-enable-windows-laps-microsoft-entra-id-manage-local-administrator-passwords/2026-10-20T16:06:15+00:00https://nhimg.org/faq/how-do-you-get-started-with-privileged-identity-management-in-microsoft-entra-id/2026-10-20T16:06:20+00:00https://nhimg.org/faq/you-make-role-assignments-eligible-rather-than-permanent-microsoft-entra-pim/2026-10-20T16:06:24+00:00https://nhimg.org/faq/how-do-you-list-and-review-microsoft-entra-role-assignments/2026-10-20T16:06:25+00:00https://nhimg.org/faq/how-do-you-manage-emergency-access-break-glass-accounts-in-microsoft-entra-id/2026-10-20T16:06:30+00:00https://nhimg.org/faq/you-manage-privileged-group-membership-pim-groups-microsoft-entra-id/2026-10-20T16:06:34+00:00https://nhimg.org/faq/you-plan-privileged-identity-management-deployment-microsoft-entra-id/2026-10-20T16:06:39+00:00https://nhimg.org/faq/how-do-you-require-approval-to-activate-privileged-roles-in-microsoft-entra-pim/2026-10-20T16:06:44+00:00https://nhimg.org/faq/you-require-compliant-hybrid-joined-devices-administrators-microsoft-entra/2026-10-20T16:06:51+00:00https://nhimg.org/faq/how-do-you-run-access-reviews-of-privileged-roles-in-microsoft-entra-pim/2026-10-20T16:06:56+00:00https://nhimg.org/faq/you-secure-partner-delegated-administration-across-microsoft-entra-tenants/2026-10-20T16:06:58+00:00https://nhimg.org/faq/how-do-you-secure-ssh-server-administration-with-microsoft-entra-private-access/2026-10-20T16:07:01+00:00https://nhimg.org/faq/how-do-you-use-just-in-time-vm-access-in-microsoft-defender-for-cloud/2026-10-20T16:07:06+00:00https://nhimg.org/faq/how-do-you-use-microsoft-entra-groups-to-manage-role-assignments/2026-10-20T16:07:08+00:00https://nhimg.org/faq/how-do-you-use-windows-laps-with-microsoft-entra-id/2026-10-20T16:07:13+00:00https://nhimg.org/faq/how-many-global-administrators-should-a-microsoft-entra-id-tenant-have/2026-10-20T16:07:15+00:00https://nhimg.org/faq/how-should-super-admin-accounts-be-managed-in-google-workspace/2026-10-20T16:07:22+00:00https://nhimg.org/faq/what-are-best-practices-for-managing-microsoft-entra-administrator-roles/2026-10-20T16:07:29+00:00https://nhimg.org/faq/you-handle-shared-accounts-credentials-securely-microsoft-entra-id/2026-10-20T16:07:31+00:00https://nhimg.org/faq/what-security-alerts-does-microsoft-entra-pim-raise-for-privileged-roles/2026-10-20T16:07:33+00:00https://nhimg.org/faq/what-is-the-difference-between-red-forest-and-active-directory-tiering/2026-10-20T16:07:36+00:00https://nhimg.org/faq/you-monitor-detect-misuse-privileged-identity-management-microsoft-entra-id/2026-10-20T16:07:42+00:00https://nhimg.org/faq/which-least-privileged-microsoft-entra-role-should-you-use-for-each-admin-task/2026-10-20T16:07:45+00:00https://nhimg.org/faq/what-are-the-risks-of-shared-accounts-and-how-should-they-be-managed/2026-10-20T16:07:48+00:00https://nhimg.org/faq/which-microsoft-entra-built-in-roles-are-the-most-privileged/2026-10-20T16:07:53+00:00https://nhimg.org/faq/why-should-microsoft-365-administrator-accounts-be-cloud-only/2026-10-20T16:07:57+00:00https://nhimg.org/faq/how-does-a-flipper-zero-relay-attack-work/2026-10-20T16:08:00+00:00https://nhimg.org/faq/why-are-too-many-global-administrators-a-risk-in-microsoft-entra-id/2026-10-20T16:08:02+00:00https://nhimg.org/faq/how-are-x509-certificates-used-in-mtls/2026-10-20T16:08:06+00:00https://nhimg.org/faq/you-detect-new-root-certificate-authority-being-added-microsoft-entra-id/2026-10-20T16:08:10+00:00https://nhimg.org/faq/how-do-you-get-a-free-smime-certificate/2026-10-20T16:08:20+00:00https://nhimg.org/faq/you-detect-vulnerable-certificate-template-configurations-ad-certificate/2026-10-20T16:08:23+00:00https://nhimg.org/faq/you-detect-ad-certificate-services-attack-tools-such-certify-certipy/2026-10-20T16:08:25+00:00https://nhimg.org/faq/how-do-you-manage-expired-certificates-in-it-asset-management/2026-10-20T16:08:29+00:00https://nhimg.org/faq/how-do-you-manage-saml-federation-certificates-in-microsoft-entra-id/2026-10-20T16:08:34+00:00https://nhimg.org/faq/how-do-you-monitor-aws-acm-certificates-for-upcoming-expiry/2026-10-20T16:08:36+00:00https://nhimg.org/faq/you-renew-federation-certificates-microsoft-365-microsoft-entra-id/2026-10-20T16:08:39+00:00https://nhimg.org/faq/you-detect-certificates-private-keys-being-exported-windows-certificate-stores/2026-10-20T16:08:46+00:00https://nhimg.org/faq/how-does-message-signing-work/2026-10-20T16:08:50+00:00https://nhimg.org/faq/how-do-you-rotate-signing-keys-in-the-microsoft-identity-platform/2026-10-20T16:08:55+00:00https://nhimg.org/faq/what-does-jks-stand-for/2026-10-20T16:08:57+00:00https://nhimg.org/faq/why-is-a-signing-key-required/2026-10-20T16:09:01+00:00https://nhimg.org/faq/what-does-the-anpd-do-in-brazil/2026-10-20T16:09:01+00:00https://nhimg.org/faq/does-the-ciso-create-the-business-impact-analysis-bia/2026-10-20T16:09:07+00:00https://nhimg.org/faq/how-do-you-make-microsoft-entra-id-authentication-resilient-to-outages/2026-10-20T16:09:12+00:00https://nhimg.org/faq/how-do-you-back-up-and-recover-microsoft-entra-id-configuration/2026-10-20T16:09:17+00:00https://nhimg.org/faq/how-do-you-plan-for-recoverability-of-a-microsoft-entra-tenant/2026-10-20T16:09:18+00:00https://nhimg.org/faq/how-do-you-recover-from-accidental-deletions-in-microsoft-entra-id/2026-10-20T16:09:24+00:00https://nhimg.org/faq/how-do-you-recover-from-misconfigurations-in-microsoft-entra-id/2026-10-20T16:09:27+00:00https://nhimg.org/faq/how-do-you-prevent-accidental-deletes-in-microsoft-entra-connect-and-cloud-sync/2026-10-20T16:09:29+00:00https://nhimg.org/faq/how-does-microsoft-entra-backup-and-recovery-protect-tenant-configuration/2026-10-20T16:09:32+00:00https://nhimg.org/faq/you-recover-deleted-changed-objects-microsoft-entra-backup-recovery/2026-10-20T16:09:38+00:00https://nhimg.org/faq/what-should-an-entra-id-recovery-runbook-include/2026-10-20T16:09:42+00:00https://nhimg.org/faq/how-do-you-index-telemetry-data/2026-10-20T16:09:42+00:00https://nhimg.org/faq/how-are-discord-bots-with-backdoor-commands-used-in-attacks/2026-10-20T16:09:44+00:00https://nhimg.org/faq/how-does-alert-fatigue-from-nhi-alerts-affect-soc-analysts/2026-10-20T16:09:51+00:00https://nhimg.org/faq/how-do-you-stream-microsoft-entra-logs-to-an-event-hub-for-siem-monitoring/2026-10-20T16:09:55+00:00https://nhimg.org/faq/what-kpis-measure-threat-hunting-maturity/2026-10-20T16:10:03+00:00https://nhimg.org/faq/which-apt-groups-target-swift/2026-10-20T16:10:05+00:00https://nhimg.org/faq/what-does-f1-score-stand-for-in-cybersecurity/2026-10-20T16:10:09+00:00https://nhimg.org/faq/why-are-false-negatives-more-dangerous-than-false-positives/2026-10-20T16:10:11+00:00https://nhimg.org/faq/how-do-api-paths-and-secrets-leak-on-github/2026-10-20T16:10:14+00:00https://nhimg.org/faq/you-avoid-exposing-secrets-azure-container-instances-environment-variables/2026-10-20T16:10:17+00:00https://nhimg.org/faq/how-do-you-avoid-hard-coded-credentials-in-terraform-provider-blocks/2026-10-20T16:10:22+00:00https://nhimg.org/faq/how-do-you-detect-access-to-or-changes-to-kubernetes-secrets/2026-10-20T16:10:28+00:00https://nhimg.org/faq/how-do-you-detect-bitbucket-secret-scanning-rules-being-deleted-or-bypassed/2026-10-20T16:10:36+00:00https://nhimg.org/faq/how-do-you-detect-azure-key-vault-keys-or-secrets-being-modified-or-deleted/2026-10-20T16:10:39+00:00https://nhimg.org/faq/how-do-you-detect-github-secret-scanning-being-disabled/2026-10-20T16:10:42+00:00https://nhimg.org/faq/how-do-you-detect-github-push-protection-being-bypassed-or-disabled/2026-10-20T16:10:44+00:00https://nhimg.org/faq/how-do-you-detect-new-secrets-being-created-in-github/2026-10-20T16:10:47+00:00https://nhimg.org/faq/how-do-you-enable-automatic-rotation-for-aws-secrets-manager-secrets/2026-10-20T16:10:53+00:00https://nhimg.org/faq/how-do-you-enable-gitlab-push-rules-to-stop-secrets-being-committed/2026-10-20T16:10:57+00:00https://nhimg.org/faq/how-do-you-enable-secret-scanning-in-github-repositories/2026-10-20T16:11:03+00:00https://nhimg.org/faq/you-find-remove-hardcoded-secrets-aws-environment-variables-user-data-code/2026-10-20T16:11:07+00:00https://nhimg.org/faq/you-find-hard-coded-secrets-ec2-user-data-lambda-environment-variables-parameter/2026-10-20T16:11:10+00:00https://nhimg.org/faq/how-do-you-inject-secrets-into-a-c-application-at-runtime/2026-10-20T16:11:17+00:00https://nhimg.org/faq/how-do-you-prevent-sensitive-data-being-stored-in-openstack-resource-metadata/2026-10-20T16:11:19+00:00https://nhimg.org/faq/how-do-you-prevent-credentials-being-exposed-in-azure-vm-custom-data/2026-10-20T16:11:22+00:00https://nhimg.org/faq/how-do-you-protect-vercel-project-secrets-from-untrusted-git-forks/2026-10-20T16:11:26+00:00https://nhimg.org/faq/how-do-you-restrict-access-to-aws-secrets-manager-secrets-with-resource-policies/2026-10-20T16:11:31+00:00https://nhimg.org/faq/how-do-you-rotate-aws-secrets-manager-secrets-automatically/2026-10-20T16:11:36+00:00https://nhimg.org/faq/how-do-you-secure-amazon-bedrock-api-keys/2026-10-20T16:11:42+00:00https://nhimg.org/faq/how-do-you-secure-and-restrict-google-cloud-api-keys/2026-10-20T16:11:44+00:00https://nhimg.org/faq/how-do-you-secure-secrets-stored-as-vercel-environment-variables/2026-10-20T16:11:49+00:00https://nhimg.org/faq/how-do-you-secure-and-rotate-secrets-in-google-cloud-secret-manager/2026-10-20T16:11:52+00:00https://nhimg.org/faq/how-do-you-set-expiration-dates-for-keys-and-secrets-in-azure-key-vault/2026-10-20T16:11:55+00:00https://nhimg.org/faq/how-do-you-solve-the-secret-zero-problem-on-windows/2026-10-20T16:12:00+00:00https://nhimg.org/faq/what-are-the-risks-of-secret-leakage/2026-10-20T16:12:03+00:00https://nhimg.org/faq/what-happened-in-the-home-depot-github-token-exposure/2026-10-20T16:12:09+00:00https://nhimg.org/faq/what-happened-in-the-internet-archive-data-breach/2026-10-20T16:12:12+00:00https://nhimg.org/faq/what-happened-in-the-sisense-credentials-breach/2026-10-20T16:12:15+00:00https://nhimg.org/faq/what-should-you-do-if-an-ai-agent-api-key-is-exposed/2026-10-20T16:12:21+00:00https://nhimg.org/faq/what-should-you-do-if-an-llm-api-key-is-leaked/2026-10-20T16:12:26+00:00https://nhimg.org/faq/what-happened-in-the-toyota-data-breach/2026-10-20T16:12:27+00:00https://nhimg.org/faq/why-should-api-key-authentication-be-disabled-for-azure-ai-services/2026-10-20T16:12:32+00:00https://nhimg.org/faq/why-should-kubernetes-pods-not-store-secrets-in-environment-variables/2026-10-20T16:12:34+00:00https://nhimg.org/faq/is-ffmpeg-safe-to-use/2026-10-20T16:12:38+00:00https://nhimg.org/faq/how-does-trust-work-in-package-management/2026-10-20T16:12:40+00:00https://nhimg.org/faq/why-does-a-lockfile-exist-in-python-projects/2026-10-20T16:12:43+00:00https://nhimg.org/faq/how-does-an-always-on-vulnerability-disclosure-programme-work/2026-10-20T16:12:49+00:00https://nhimg.org/faq/what-are-examples-of-offensive-security/2026-10-20T16:12:51+00:00https://nhimg.org/faq/what-is-the-difference-between-epss-and-ctem/2026-10-20T16:12:52+00:00https://nhimg.org/faq/what-is-the-difference-between-findings-and-vulnerabilities-in-security/2026-10-20T16:12:57+00:00https://nhimg.org/faq/you-assign-managed-identity-application-role-microsoft-entra-id/2026-10-20T16:13:02+00:00https://nhimg.org/faq/how-do-managed-identities-on-an-azure-vm-acquire-access-tokens/2026-10-20T16:13:05+00:00https://nhimg.org/faq/you-configure-managed-identities-azure-virtual-machines-scale-sets/2026-10-20T16:13:09+00:00https://nhimg.org/faq/what-vulnerability-databases-are-similar-to-nvd-and-cve/2026-10-20T16:13:13+00:00https://nhimg.org/faq/how-do-you-create-and-manage-user-assigned-managed-identities-in-azure/2026-10-20T16:13:16+00:00https://nhimg.org/faq/how-do-you-configure-workload-identity-federation-in-microsoft-entra-id/2026-10-20T16:13:19+00:00https://nhimg.org/faq/how-do-you-enable-managed-identity-for-an-azure-app-service-web-app/2026-10-20T16:13:25+00:00https://nhimg.org/faq/how-do-you-detect-ecs-task-definitions-querying-the-aws-credential-endpoint/2026-10-20T16:13:31+00:00https://nhimg.org/faq/how-do-you-enable-the-gke-metadata-server-for-workload-identity/2026-10-20T16:13:35+00:00https://nhimg.org/faq/how-do-you-grant-a-managed-identity-access-to-an-azure-resource/2026-10-20T16:13:42+00:00https://nhimg.org/faq/how-do-you-limit-kubernetes-service-account-token-automounting/2026-10-20T16:13:46+00:00https://nhimg.org/faq/how-do-you-monitor-managed-identity-sign-ins-in-microsoft-entra-id/2026-10-20T16:13:49+00:00https://nhimg.org/faq/you-restrict-workload-identity-federation-managed-identities-azure-policy/2026-10-20T16:13:55+00:00https://nhimg.org/faq/how-do-you-secure-managed-identities-in-microsoft-entra-id/2026-10-20T16:13:59+00:00https://nhimg.org/faq/how-do-you-restrict-who-can-assign-user-assigned-managed-identities-in-azure/2026-10-20T16:14:03+00:00https://nhimg.org/faq/you-secure-workload-identity-federation-attribute-conditions-google-cloud/2026-10-20T16:14:10+00:00https://nhimg.org/faq/you-securely-configure-github-actions-oidc-google-cloud-workload-identity/2026-10-20T16:14:15+00:00https://nhimg.org/faq/continuous-access-evaluation-work-workload-identities-microsoft-entra-id/2026-10-20T16:14:18+00:00https://nhimg.org/faq/how-does-microsoft-entra-id-protection-secure-workload-identities/2026-10-20T16:14:22+00:00https://nhimg.org/faq/you-use-managed-identity-federated-credential-microsoft-entra-app-registration/2026-10-20T16:14:25+00:00https://nhimg.org/faq/how-does-spiffe-apply-to-non-human-identities/2026-10-20T16:14:30+00:00https://nhimg.org/faq/how-does-workload-identity-federation-work-in-microsoft-entra-id/2026-10-20T16:14:35+00:00https://nhimg.org/faq/how-does-secretless-authentication-work-in-azure/2026-10-20T16:14:40+00:00https://nhimg.org/faq/how-is-openid-connect-used-for-machine-identities/2026-10-20T16:14:47+00:00https://nhimg.org/faq/how-is-authorization-handled-for-ephemeral-identities/2026-10-20T16:14:50+00:00https://nhimg.org/faq/why-should-argo-workflows-pods-not-use-the-default-kubernetes-service-account/2026-10-20T16:14:53+00:00https://nhimg.org/faq/why-should-azure-function-app-managed-identities-not-hold-privileged-roles/2026-10-20T16:14:55+00:00https://nhimg.org/faq/why-should-ecs-task-execution-roles-and-task-roles-be-different-in-amazon-ecs/2026-10-20T16:14:58+00:00https://nhimg.org/faq/security-risks-assigning-aws-amazoneksmcpreadonlyaccess-managed-policy/2026-10-20T16:15:00+00:00https://nhimg.org/faq/which-ai-applications-are-most-exposed-to-cascading-hallucination-attack/2026-10-20T16:15:05+00:00https://nhimg.org/faq/why-does-microsoft-entra-agent-id-matter-for-security-teams/2026-10-20T16:15:11+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-azure-ai-administrator-role/2026-10-20T16:15:14+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-google-cloud-vertex-ai-administrator-role/2026-10-20T16:15:17+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-google-cloud-vertex-ai-user-role/2026-10-20T16:15:21+00:00https://nhimg.org/faq/what-permissions-does-the-azure-cognitive-services-openai-user-role-grant/2026-10-20T16:15:25+00:00https://nhimg.org/faq/what-permissions-does-the-azure-cognitive-services-openai-contributor-role-grant/2026-10-20T16:15:28+00:00https://nhimg.org/faq/how-do-developers-prevent-cross-tenant-insecure-direct-object-reference-idor/2026-10-20T16:15:30+00:00https://nhimg.org/faq/what-does-http-desync-attack-look-like-in-a-real-intrusion/2026-10-20T16:15:36+00:00https://nhimg.org/faq/what-is-an-example-of-aboutsrcdoc-in-practice/2026-10-20T16:15:36+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-azure-kubernetes-service-rbac-cluster-admin-role/2026-10-20T16:15:42+00:00https://nhimg.org/faq/which-attacks-does-javascript-deobfuscation-help-stop/2026-10-20T16:15:43+00:00https://nhimg.org/faq/what-is-an-example-of-hybrid-rbac-abac-authorisation-model-in-practice/2026-10-20T16:15:48+00:00https://nhimg.org/faq/what-permissions-does-the-azure-kubernetes-service-rbac-admin-role-grant/2026-10-20T16:15:51+00:00https://nhimg.org/faq/what-permissions-does-the-azure-user-access-administrator-role-grant/2026-10-20T16:15:55+00:00https://nhimg.org/faq/how-does-a-liveness-check-improve-security/2026-10-20T16:15:56+00:00https://nhimg.org/faq/what-are-common-mistakes-with-microsoft-entra-b2b-collaboration/2026-10-20T16:16:00+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-aws-amazonbedrockfullaccess-managed-policy/2026-10-20T16:16:03+00:00https://nhimg.org/faq/how-do-attackers-use-cloud-ssrf/2026-10-20T16:16:06+00:00https://nhimg.org/faq/what-mitigations-reduce-the-risk-of-biometric-injection-attacks/2026-10-20T16:16:09+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-aws-amazondynamodbreadonlyaccess-managed-policy/2026-10-20T16:16:11+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-aws-amazoneksclusterpolicy-managed-policy/2026-10-20T16:16:13+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-aws-iam-role-trust-policy/2026-10-20T16:16:17+00:00https://nhimg.org/faq/you-audit-who-holds-aws-iamaccessanalyzerreadonlyaccess-managed-policy/2026-10-20T16:16:20+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-aws-iamfullaccess-managed-policy/2026-10-20T16:16:23+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-azure-storage-account-contributor-role/2026-10-20T16:16:27+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-google-kubernetes-engine-admin-role/2026-10-20T16:16:31+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-azure-virtual-machine-contributor-role/2026-10-20T16:16:34+00:00https://nhimg.org/faq/security-risks-assigning-aws-administratoraccess-managed-policy/2026-10-20T16:16:37+00:00https://nhimg.org/faq/security-risks-assigning-aws-amazonec2readonlyaccess-managed-policy/2026-10-20T16:16:39+00:00https://nhimg.org/faq/security-risks-assigning-aws-amazoneks-cni-policy-managed-policy/2026-10-20T16:16:44+00:00https://nhimg.org/faq/security-risks-assigning-aws-amazons3readonlyaccess-managed-policy/2026-10-20T16:16:46+00:00https://nhimg.org/faq/security-risks-assigning-aws-awsorganizationsreadonlyaccess-managed-policy/2026-10-20T16:16:50+00:00https://nhimg.org/faq/security-risks-assigning-aws-amazonssmreadonlyaccess-managed-policy/2026-10-20T16:16:54+00:00https://nhimg.org/faq/security-risks-assigning-aws-awssecurityhubfullaccess-managed-policy/2026-10-20T16:16:57+00:00https://nhimg.org/faq/security-risks-assigning-aws-awssecurityhubreadonlyaccess-managed-policy/2026-10-20T16:16:59+00:00https://nhimg.org/faq/security-risks-assigning-aws-iamaccessanalyzerfullaccess-managed-policy/2026-10-20T16:17:03+00:00https://nhimg.org/faq/what-permissions-does-the-aws-amazonec2fullaccess-managed-policy-grant/2026-10-20T16:17:06+00:00https://nhimg.org/faq/what-permissions-does-the-aws-amazonecs-fullaccess-managed-policy-grant/2026-10-20T16:17:10+00:00https://nhimg.org/faq/what-permissions-does-the-aws-amazonguarddutyfullaccess-managed-policy-grant/2026-10-20T16:17:14+00:00https://nhimg.org/faq/what-permissions-does-the-aws-amazonguarddutyreadonlyaccess-managed-policy-grant/2026-10-20T16:17:17+00:00https://nhimg.org/faq/security-risks-assigning-azure-kubernetes-service-cluster-admin-role/2026-10-20T16:17:20+00:00https://nhimg.org/faq/what-permissions-does-the-aws-amazonrdsfullaccess-managed-policy-grant/2026-10-20T16:17:23+00:00https://nhimg.org/faq/what-permissions-does-the-aws-amazonsagemakerfullaccess-managed-policy-grant/2026-10-20T16:17:27+00:00https://nhimg.org/faq/what-permissions-does-the-aws-readonlyaccess-managed-policy-grant/2026-10-20T16:17:31+00:00https://nhimg.org/faq/what-permissions-does-the-azure-automation-contributor-role-grant/2026-10-20T16:17:38+00:00https://nhimg.org/faq/what-permissions-does-the-aws-viewonlyaccess-managed-policy-grant/2026-10-20T16:17:42+00:00https://nhimg.org/faq/what-permissions-does-the-google-cloud-compute-admin-role-grant/2026-10-20T16:17:45+00:00https://nhimg.org/faq/used-instead-aws-amazonbedrocklimitedaccess-managed-policy-least-privilege/2026-10-20T16:17:48+00:00https://nhimg.org/faq/used-instead-aws-amazondynamodbfullaccess-managed-policy-least-privilege/2026-10-20T16:17:54+00:00https://nhimg.org/faq/used-instead-aws-amazonbedrockreadonly-managed-policy-least-privilege/2026-10-20T16:17:56+00:00https://nhimg.org/faq/used-instead-aws-amazoneksvpcresourcecontroller-managed-policy-least-privilege/2026-10-20T16:17:59+00:00https://nhimg.org/faq/used-instead-aws-amazoneksworkernodepolicy-managed-policy-least-privilege/2026-10-20T16:18:06+00:00https://nhimg.org/faq/used-instead-aws-amazonsagemakerreadonly-managed-policy-least-privilege/2026-10-20T16:18:15+00:00https://nhimg.org/faq/used-instead-aws-amazonrdsreadonlyaccess-managed-policy-least-privilege/2026-10-20T16:18:18+00:00https://nhimg.org/faq/used-instead-aws-amazonssmfullaccess-managed-policy-least-privilege/2026-10-20T16:18:23+00:00https://nhimg.org/faq/used-instead-aws-awscloudtrail-fullaccess-managed-policy-least-privilege/2026-10-20T16:18:26+00:00https://nhimg.org/faq/used-instead-aws-awslambda-fullaccess-managed-policy-least-privilege/2026-10-20T16:18:32+00:00https://nhimg.org/faq/used-instead-aws-awscloudtrail-readonlyaccess-managed-policy-least-privilege/2026-10-20T16:18:35+00:00https://nhimg.org/faq/used-instead-aws-awslambda-readonlyaccess-managed-policy-least-privilege/2026-10-20T16:18:38+00:00https://nhimg.org/faq/used-instead-aws-awsorganizationsfullaccess-managed-policy-least-privilege/2026-10-20T16:18:45+00:00https://nhimg.org/faq/used-instead-aws-awssupportaccess-managed-policy-least-privilege/2026-10-20T16:18:52+00:00https://nhimg.org/faq/used-instead-aws-iamaccessadvisorreadonly-managed-policy-least-privilege/2026-10-20T16:18:55+00:00https://nhimg.org/faq/used-instead-aws-iamreadonlyaccess-managed-policy-least-privilege/2026-10-20T16:18:59+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-azure-storage-blob-data-reader-role/2026-10-20T16:19:04+00:00https://nhimg.org/faq/what-permissions-does-the-azure-storage-blob-data-owner-role-grant/2026-10-20T16:19:10+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-google-cloud-storage-admin-role/2026-10-20T16:19:12+00:00https://nhimg.org/faq/what-permissions-does-the-google-cloud-storage-object-admin-role-grant/2026-10-20T16:19:16+00:00https://nhimg.org/faq/how-can-security-teams-detect-ntlm-reflection-attack/2026-10-20T16:19:22+00:00https://nhimg.org/faq/used-instead-azure-storage-blob-data-contributor-role-least-privilege/2026-10-20T16:19:27+00:00https://nhimg.org/faq/how-do-attackers-use-active-directory-acl-abuse/2026-10-20T16:19:28+00:00https://nhimg.org/faq/how-do-organisations-get-started-with-microsoft-entra-hybrid-joined-device/2026-10-20T16:19:33+00:00https://nhimg.org/faq/how-do-organisations-get-started-with-federation-with-microsoft-entra-id/2026-10-20T16:19:36+00:00https://nhimg.org/faq/how-does-cross-tenant-synchronisation-work/2026-10-20T16:19:39+00:00https://nhimg.org/faq/how-do-organisations-get-started-with-active-directory-privileged-groups/2026-10-20T16:19:42+00:00https://nhimg.org/faq/how-do-microsoft-entra-connect-and-connect-health-work/2026-10-20T16:19:46+00:00https://nhimg.org/faq/security-risks-assigning-google-cloud-storage-object-viewer-role/2026-10-20T16:19:51+00:00https://nhimg.org/faq/how-does-a-multitenant-organisation-work/2026-10-20T16:19:52+00:00https://nhimg.org/faq/how-does-microsoft-entra-cloud-sync-work/2026-10-20T16:19:58+00:00https://nhimg.org/faq/how-does-single-sign-on-in-microsoft-entra-id-work/2026-10-20T16:20:02+00:00https://nhimg.org/faq/what-are-common-mistakes-with-microsoft-entra-joined-devices/2026-10-20T16:20:04+00:00https://nhimg.org/faq/what-are-the-security-risks-of-group-policy-scripts/2026-10-20T16:20:07+00:00https://nhimg.org/faq/what-attacks-target-nt-lan-manager-version-2-ntlmv2/2026-10-20T16:20:10+00:00https://nhimg.org/faq/what-does-timeroasting-look-like-in-a-real-intrusion/2026-10-20T16:20:11+00:00https://nhimg.org/faq/what-is-an-example-of-microsoft-entra-registered-device-in-practice/2026-10-20T16:20:11+00:00https://nhimg.org/faq/what-evidence-shows-ldap-signing-and-channel-binding-is-working/2026-10-20T16:20:14+00:00https://nhimg.org/faq/what-mitigations-reduce-the-risk-of-readgmsapassword/2026-10-20T16:20:20+00:00https://nhimg.org/faq/what-risks-does-protected-actions-reduce/2026-10-20T16:20:28+00:00https://nhimg.org/faq/which-logs-show-evidence-of-readlapspassword/2026-10-20T16:20:32+00:00https://nhimg.org/faq/what-mitigations-reduce-the-risk-of-syncjacking/2026-10-20T16:20:32+00:00https://nhimg.org/faq/how-do-organisations-get-started-with-rooted-device/2026-10-20T16:20:34+00:00https://nhimg.org/faq/why-does-microsoft-entra-matter-for-security-teams/2026-10-20T16:20:36+00:00https://nhimg.org/faq/how-do-you-use-sudo-i-safely/2026-10-20T16:20:40+00:00https://nhimg.org/faq/attacks-completely-automated-public-turing-test-tell-computers-humans-apart/2026-10-20T16:20:40+00:00https://nhimg.org/faq/used-instead-aws-securityaudit-managed-policy-least-privilege/2026-10-20T16:20:44+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-aws-iamuserchangepassword-managed-policy/2026-10-20T16:20:56+00:00https://nhimg.org/faq/how-do-developers-prevent-oauth-misconfiguration/2026-10-20T16:20:59+00:00https://nhimg.org/faq/how-do-organisations-get-started-with-oauth-resource-server/2026-10-20T16:21:03+00:00https://nhimg.org/faq/you-audit-who-holds-aws-awsssomemberaccountadministrator-managed-policy/2026-10-20T16:21:04+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-azure-virtual-machine-administrator-login-role/2026-10-20T16:21:06+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-google-cloud-security-admin-role/2026-10-20T16:21:08+00:00https://nhimg.org/faq/how-does-jwt-scope-scope-claim-work/2026-10-20T16:21:12+00:00https://nhimg.org/faq/how-does-pluggable-authentication-modules-pam-work/2026-10-20T16:21:14+00:00https://nhimg.org/faq/what-are-common-mistakes-with-saml-assertion-consumer-service-acs/2026-10-20T16:21:28+00:00https://nhimg.org/faq/what-are-common-mistakes-with-single-sign-on-sso-authentication/2026-10-20T16:21:33+00:00https://nhimg.org/faq/what-are-the-security-risks-of-assigning-the-aws-awsssoreadonly-managed-policy/2026-10-20T16:21:36+00:00https://nhimg.org/faq/what-are-the-security-risks-of-assigning-the-google-cloud-project-iam-admin-role/2026-10-20T16:21:41+00:00https://nhimg.org/faq/what-is-an-example-of-conditional-access-policy-coverage-gap-in-real-code/2026-10-20T16:21:44+00:00https://nhimg.org/faq/what-is-an-example-of-jwt-audience-aud-claim-in-practice/2026-10-20T16:21:48+00:00https://nhimg.org/faq/what-are-common-mistakes-with-single-page-application-spa-authentication/2026-10-20T16:21:52+00:00https://nhimg.org/faq/what-is-an-example-of-delegated-token-in-practice/2026-10-20T16:21:59+00:00https://nhimg.org/faq/what-is-an-example-of-jwt-authorised-party-azp-claim-in-practice/2026-10-20T16:22:03+00:00https://nhimg.org/faq/what-is-an-example-of-openid-connect-oidc-security-in-practice/2026-10-20T16:22:06+00:00https://nhimg.org/faq/what-permissions-does-the-aws-awsssodirectoryadministrator-managed-policy-grant/2026-10-20T16:22:10+00:00https://nhimg.org/faq/permissions-aws-awsssomasteraccountadministrator-managed-policy-grant/2026-10-20T16:22:12+00:00https://nhimg.org/faq/which-frameworks-include-context-aware-access/2026-10-20T16:22:19+00:00https://nhimg.org/faq/what-permissions-does-the-azure-virtual-machine-user-login-role-grant/2026-10-20T16:22:22+00:00https://nhimg.org/faq/which-systems-are-most-exposed-to-oauth-account-takeover/2026-10-20T16:22:25+00:00https://nhimg.org/faq/used-instead-google-cloud-organization-administrator-role-least-privilege/2026-10-20T16:22:29+00:00https://nhimg.org/faq/how-does-microsoft-entra-provisioning-agent-work/2026-10-20T16:22:34+00:00https://nhimg.org/faq/what-are-common-mistakes-with-my-access-portal/2026-10-20T16:22:36+00:00https://nhimg.org/faq/what-is-an-example-of-automated-app-user-provisioning-in-practice/2026-10-20T16:22:40+00:00https://nhimg.org/faq/what-is-an-example-of-inter-directory-provisioning-in-practice/2026-10-20T16:22:42+00:00https://nhimg.org/faq/what-risks-does-hr-driven-provisioning-reduce/2026-10-20T16:22:50+00:00https://nhimg.org/faq/which-frameworks-include-segregation-of-duties-sod-in-iam/2026-10-20T16:22:53+00:00https://nhimg.org/faq/why-does-microsoft-entra-access-reviews-matter-for-security-teams/2026-10-20T16:22:56+00:00https://nhimg.org/faq/how-do-organisations-get-started-with-microsoft-entra-identity-secure-score/2026-10-20T16:23:02+00:00https://nhimg.org/faq/what-mitigations-reduce-the-risk-of-targeted-kerberoasting/2026-10-20T16:23:05+00:00https://nhimg.org/faq/what-is-an-example-of-anomalous-token-detection-in-practice/2026-10-20T16:23:09+00:00https://nhimg.org/faq/which-sectors-has-scattered-lapsus-hunters-targeted/2026-10-20T16:23:10+00:00https://nhimg.org/faq/why-does-microsoft-entra-id-protection-matter-for-security-teams/2026-10-20T16:23:16+00:00https://nhimg.org/faq/what-are-common-mistakes-with-passwordless-login/2026-10-20T16:23:18+00:00https://nhimg.org/faq/what-is-google-authenticator-used-for-in-security-testing/2026-10-20T16:23:20+00:00https://nhimg.org/faq/how-do-attackers-abuse-trycloudflare/2026-10-20T16:23:25+00:00https://nhimg.org/faq/how-do-you-secure-transport-layer-security-12/2026-10-20T16:23:30+00:00https://nhimg.org/faq/is-it-safe-to-expose-port-445-smb-to-the-internet/2026-10-20T16:23:32+00:00https://nhimg.org/faq/what-are-common-mistakes-with-firewall-authentication/2026-10-20T16:23:39+00:00https://nhimg.org/faq/what-are-common-mistakes-with-microsoft-global-secure-access/2026-10-20T16:23:42+00:00https://nhimg.org/faq/you-audit-who-holds-aws-amazoneksfargatepodexecutionrolepolicy-managed-policy/2026-10-20T16:23:47+00:00https://nhimg.org/faq/what-risks-does-ssh-tunnel-reduce/2026-10-20T16:23:47+00:00https://nhimg.org/faq/how-do-organisations-get-started-with-owasp-non-human-identities-top-10/2026-10-20T16:23:51+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-aws-amazonssmmanagedinstancecore-managed-policy/2026-10-20T16:23:52+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-azure-managed-identity-contributor-role/2026-10-20T16:23:57+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-azure-managed-identity-operator-role/2026-10-20T16:24:03+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-aws-awslambdabasicexecutionrole-managed-policy/2026-10-20T16:24:06+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-google-cloud-service-account-key-admin-role/2026-10-20T16:24:11+00:00https://nhimg.org/faq/how-does-kubernetes-serviceaccount-work/2026-10-20T16:24:13+00:00https://nhimg.org/faq/how-does-terraform-execution-identity-work/2026-10-20T16:24:16+00:00https://nhimg.org/faq/security-risks-assigning-aws-amazonecstaskexecutionrolepolicy-managed-policy/2026-10-20T16:24:18+00:00https://nhimg.org/faq/how-does-a-service-account-abuse-attack-work/2026-10-20T16:24:22+00:00https://nhimg.org/faq/security-risks-assigning-google-cloud-service-account-admin-role/2026-10-20T16:24:26+00:00https://nhimg.org/faq/security-risks-assigning-google-cloud-service-account-token-creator-role/2026-10-20T16:24:35+00:00https://nhimg.org/faq/security-risks-assigning-aws-awslambdavpcaccessexecutionrole-managed-policy/2026-10-20T16:24:36+00:00https://nhimg.org/faq/security-risks-assigning-google-cloud-service-account-user-role/2026-10-20T16:24:40+00:00https://nhimg.org/faq/what-permissions-does-the-aws-amazonssmautomationrole-managed-policy-grant/2026-10-20T16:24:42+00:00https://nhimg.org/faq/permissions-aws-amazonssmmanagedec2instancedefaultpolicy-managed-policy-grant/2026-10-20T16:24:46+00:00https://nhimg.org/faq/what-is-an-example-of-token-lifecycle-management-in-practice/2026-10-20T16:24:50+00:00https://nhimg.org/faq/permissions-aws-iamselfmanageservicespecificcredentials-managed-policy-grant/2026-10-20T16:24:52+00:00https://nhimg.org/faq/used-instead-google-cloud-service-account-creator-role-least-privilege/2026-10-20T16:24:57+00:00https://nhimg.org/faq/how-does-ot-identity-management-work/2026-10-20T16:25:10+00:00https://nhimg.org/faq/how-does-root-administrator-account-work/2026-10-20T16:25:12+00:00https://nhimg.org/faq/security-risks-assigning-aws-iamauditrootusercredentials-managed-policy/2026-10-20T16:25:15+00:00https://nhimg.org/faq/what-evidence-shows-automated-password-rotation-is-working/2026-10-20T16:25:19+00:00https://nhimg.org/faq/what-permissions-does-the-aws-iamcreaterootuserpassword-managed-policy-grant/2026-10-20T16:25:22+00:00https://nhimg.org/faq/which-logs-show-evidence-of-golden-gmsa-and-golden-dmsa-attacks/2026-10-20T16:25:26+00:00https://nhimg.org/faq/why-does-tier-0-identity-management-matter-for-security-teams/2026-10-20T16:25:34+00:00https://nhimg.org/faq/security-risks-assigning-aws-iamdeleterootusercredentials-managed-policy/2026-10-20T16:25:36+00:00https://nhimg.org/faq/how-can-security-teams-detect-ad-cs-domain-escalation/2026-10-20T16:25:39+00:00https://nhimg.org/faq/how-do-you-secure-automatic-certificate-management-environment-acme/2026-10-20T16:25:43+00:00https://nhimg.org/faq/what-are-the-security-risks-of-openssl-s-client-connect-command/2026-10-20T16:25:45+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-azure-key-vault-contributor-role/2026-10-20T16:25:48+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-azure-key-vault-secrets-officer-role/2026-10-20T16:25:51+00:00https://nhimg.org/faq/what-are-the-security-risks-of-assigning-the-aws-iamusersshkeys-managed-policy/2026-10-20T16:25:58+00:00https://nhimg.org/faq/how-do-organisations-implement-azure-key-vault-secret-rotation/2026-10-20T16:26:04+00:00https://nhimg.org/faq/security-risks-assigning-azure-key-vault-certificates-officer-role/2026-10-20T16:26:07+00:00https://nhimg.org/faq/what-are-the-security-risks-of-assigning-the-azure-key-vault-secrets-user-role/2026-10-20T16:26:09+00:00https://nhimg.org/faq/what-are-the-security-risks-of-assigning-the-azure-key-vault-crypto-officer-role/2026-10-20T16:26:14+00:00https://nhimg.org/faq/what-are-the-security-risks-of-assigning-the-azure-key-vault-administrator-role/2026-10-20T16:26:16+00:00https://nhimg.org/faq/what-permissions-does-the-google-cloud-secret-manager-admin-role-grant/2026-10-20T16:26:20+00:00https://nhimg.org/faq/what-risks-does-azure-shared-access-signature-sas-token-reduce/2026-10-20T16:26:25+00:00https://nhimg.org/faq/security-risks-assigning-google-cloud-secret-manager-secret-accessor-role/2026-10-20T16:26:30+00:00https://nhimg.org/faq/used-instead-aws-awskeymanagementservicepoweruser-managed-policy-least-privilege/2026-10-20T16:26:33+00:00https://nhimg.org/faq/used-instead-aws-secretsmanagerreadwrite-managed-policy-least-privilege/2026-10-20T16:26:40+00:00https://nhimg.org/faq/used-instead-azure-key-vault-data-access-administrator-role-least-privilege/2026-10-20T16:26:44+00:00https://nhimg.org/faq/used-instead-google-cloud-kms-admin-role-least-privilege/2026-10-20T16:26:49+00:00https://nhimg.org/faq/which-attacks-does-ban-evasion-detection-help-stop/2026-10-20T16:26:52+00:00https://nhimg.org/faq/is-spire-agent-free-to-use/2026-10-20T16:26:59+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-google-cloud-workload-identity-pool-admin-role/2026-10-20T16:27:02+00:00https://nhimg.org/faq/why-does-ssh-rsa-matter-for-security-teams/2026-10-20T16:27:04+00:00https://nhimg.org/faq/what-are-common-mistakes-with-spire-workload-registration/2026-10-20T16:27:08+00:00https://nhimg.org/faq/what-is-an-example-of-spiffe-standard-in-practice/2026-10-20T16:27:09+00:00https://nhimg.org/faq/what-permissions-does-the-google-cloud-workload-identity-user-role-grant/2026-10-20T16:27:14+00:00https://nhimg.org/faq/what-risks-does-nested-spire-reduce/2026-10-20T16:27:15+00:00https://nhimg.org/faq/how-do-attackers-use-cascading-hallucination-attack-against-ai-systems/2026-10-20T16:27:21+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-aws-amazoneksmcpreadonlyaccess-managed-policy/2026-10-20T16:27:25+00:00https://nhimg.org/faq/what-are-common-mistakes-with-microsoft-entra-agent-id/2026-10-20T16:27:29+00:00https://nhimg.org/faq/what-are-common-mistakes-with-ai-agent-traceability/2026-10-20T16:27:33+00:00https://nhimg.org/faq/security-risks-assigning-azure-cognitive-services-openai-contributor-role/2026-10-20T16:27:36+00:00https://nhimg.org/faq/used-instead-google-cloud-vertex-ai-administrator-role-least-privilege/2026-10-20T16:27:40+00:00https://nhimg.org/faq/used-instead-azure-ai-administrator-role-least-privilege/2026-10-20T16:27:43+00:00https://nhimg.org/faq/how-do-attackers-use-http-desync-attack/2026-10-20T16:27:49+00:00https://nhimg.org/faq/security-risks-assigning-azure-cognitive-services-openai-user-role/2026-10-20T16:27:55+00:00https://nhimg.org/faq/how-do-testers-find-cross-tenant-insecure-direct-object-reference-idor/2026-10-20T16:27:59+00:00https://nhimg.org/faq/used-instead-google-cloud-vertex-ai-user-role-least-privilege/2026-10-20T16:28:03+00:00https://nhimg.org/faq/how-should-organisations-get-started-with-a-hybrid-rbac-abac-authorisation-model/2026-10-20T16:28:06+00:00https://nhimg.org/faq/security-risks-assigning-azure-kubernetes-service-rbac-admin-role/2026-10-20T16:28:09+00:00https://nhimg.org/faq/security-risks-assigning-azure-user-access-administrator-role/2026-10-20T16:28:13+00:00https://nhimg.org/faq/used-instead-azure-kubernetes-service-rbac-cluster-admin-role-least-privilege/2026-10-20T16:28:16+00:00https://nhimg.org/faq/how-should-organisations-get-started-with-aboutsrcdoc/2026-10-20T16:28:20+00:00https://nhimg.org/faq/when-should-security-teams-use-liveness-check/2026-10-20T16:28:23+00:00https://nhimg.org/faq/which-logs-show-evidence-of-biometric-injection-attack/2026-10-20T16:28:30+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-aws-administratoraccess-managed-policy/2026-10-20T16:28:33+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-aws-amazonec2readonlyaccess-managed-policy/2026-10-20T16:28:34+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-aws-amazons3readonlyaccess-managed-policy/2026-10-20T16:28:39+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-aws-awsorganizationsreadonlyaccess-managed-policy/2026-10-20T16:28:45+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-aws-amazonssmreadonlyaccess-managed-policy/2026-10-20T16:28:46+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-aws-awssecurityhubfullaccess-managed-policy/2026-10-20T16:28:48+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-aws-awssecurityhubreadonlyaccess-managed-policy/2026-10-20T16:28:49+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-aws-amazoneks-cni-policy-managed-policy/2026-10-20T16:28:53+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-azure-kubernetes-service-cluster-admin-role/2026-10-20T16:28:55+00:00https://nhimg.org/faq/what-is-an-example-of-microsoft-entra-b2b-collaboration-in-practice/2026-10-20T16:28:57+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-aws-iamaccessanalyzerfullaccess-managed-policy/2026-10-20T16:29:00+00:00https://nhimg.org/faq/security-risks-assigning-aws-amazonec2fullaccess-managed-policy/2026-10-20T16:29:04+00:00https://nhimg.org/faq/security-risks-assigning-aws-amazonguarddutyfullaccess-managed-policy/2026-10-20T16:29:07+00:00https://nhimg.org/faq/security-risks-assigning-aws-amazonguarddutyreadonlyaccess-managed-policy/2026-10-20T16:29:10+00:00https://nhimg.org/faq/security-risks-assigning-aws-amazonrdsfullaccess-managed-policy/2026-10-20T16:29:12+00:00https://nhimg.org/faq/what-are-the-security-risks-of-assigning-the-aws-readonlyaccess-managed-policy/2026-10-20T16:29:15+00:00https://nhimg.org/faq/what-are-the-security-risks-of-assigning-the-azure-automation-contributor-role/2026-10-20T16:29:21+00:00https://nhimg.org/faq/what-are-the-security-risks-of-assigning-the-aws-viewonlyaccess-managed-policy/2026-10-20T16:29:23+00:00https://nhimg.org/faq/what-permissions-does-the-aws-amazonbedrocklimitedaccess-managed-policy-grant/2026-10-20T16:29:26+00:00https://nhimg.org/faq/what-permissions-does-the-aws-amazonbedrockreadonly-managed-policy-grant/2026-10-20T16:29:30+00:00https://nhimg.org/faq/security-risks-assigning-aws-amazonecs-fullaccess-managed-policy/2026-10-20T16:29:35+00:00https://nhimg.org/faq/what-permissions-does-the-aws-amazoneksworkernodepolicy-managed-policy-grant/2026-10-20T16:29:43+00:00https://nhimg.org/faq/what-are-the-security-risks-of-assigning-the-google-cloud-compute-admin-role/2026-10-20T16:29:44+00:00https://nhimg.org/faq/permissions-aws-amazoneksvpcresourcecontroller-managed-policy-grant/2026-10-20T16:29:48+00:00https://nhimg.org/faq/what-permissions-does-the-aws-amazonssmfullaccess-managed-policy-grant/2026-10-20T16:29:51+00:00https://nhimg.org/faq/what-permissions-does-the-aws-amazonsagemakerreadonly-managed-policy-grant/2026-10-20T16:29:54+00:00https://nhimg.org/faq/security-risks-assigning-aws-amazonsagemakerfullaccess-managed-policy/2026-10-20T16:29:56+00:00https://nhimg.org/faq/what-permissions-does-the-aws-awscloudtrail-fullaccess-managed-policy-grant/2026-10-20T16:30:02+00:00https://nhimg.org/faq/what-permissions-does-the-aws-awscloudtrail-readonlyaccess-managed-policy-grant/2026-10-20T16:30:06+00:00https://nhimg.org/faq/what-permissions-does-the-aws-amazondynamodbfullaccess-managed-policy-grant/2026-10-20T16:30:09+00:00https://nhimg.org/faq/what-permissions-does-the-aws-awslambda-readonlyaccess-managed-policy-grant/2026-10-20T16:30:11+00:00https://nhimg.org/faq/what-permissions-does-the-aws-awslambda-fullaccess-managed-policy-grant/2026-10-20T16:30:14+00:00https://nhimg.org/faq/what-permissions-does-the-aws-amazonrdsreadonlyaccess-managed-policy-grant/2026-10-20T16:30:19+00:00https://nhimg.org/faq/what-permissions-does-the-aws-iamaccessadvisorreadonly-managed-policy-grant/2026-10-20T16:30:24+00:00https://nhimg.org/faq/what-permissions-does-the-aws-iamreadonlyaccess-managed-policy-grant/2026-10-20T16:30:29+00:00https://nhimg.org/faq/what-permissions-does-the-aws-awssupportaccess-managed-policy-grant/2026-10-20T16:30:32+00:00https://nhimg.org/faq/used-instead-aws-amazonbedrockfullaccess-managed-policy-least-privilege/2026-10-20T16:30:35+00:00https://nhimg.org/faq/used-instead-aws-amazondynamodbreadonlyaccess-managed-policy-least-privilege/2026-10-20T16:30:40+00:00https://nhimg.org/faq/used-instead-aws-amazoneksclusterpolicy-managed-policy-least-privilege/2026-10-20T16:30:44+00:00https://nhimg.org/faq/what-should-be-used-instead-of-the-aws-iam-role-trust-policy-for-least-privilege/2026-10-20T16:30:49+00:00https://nhimg.org/faq/what-permissions-does-the-aws-awsorganizationsfullaccess-managed-policy-grant/2026-10-20T16:30:53+00:00https://nhimg.org/faq/used-instead-aws-iamaccessanalyzerreadonlyaccess-managed-policy-least-privilege/2026-10-20T16:31:04+00:00https://nhimg.org/faq/used-instead-azure-storage-account-contributor-role-least-privilege/2026-10-20T16:31:08+00:00https://nhimg.org/faq/what-permissions-does-the-azure-storage-blob-data-contributor-role-grant/2026-10-20T16:31:21+00:00https://nhimg.org/faq/used-instead-google-kubernetes-engine-admin-role-least-privilege/2026-10-20T16:31:25+00:00https://nhimg.org/faq/used-instead-azure-storage-blob-data-reader-role-least-privilege/2026-10-20T16:31:28+00:00https://nhimg.org/faq/used-instead-azure-virtual-machine-contributor-role-least-privilege/2026-10-20T16:31:33+00:00https://nhimg.org/faq/what-are-the-security-risks-of-assigning-the-azure-storage-blob-data-owner-role/2026-10-20T16:31:39+00:00https://nhimg.org/faq/security-risks-assigning-google-cloud-storage-object-admin-role/2026-10-20T16:31:44+00:00https://nhimg.org/faq/used-instead-google-cloud-storage-admin-role-least-privilege/2026-10-20T16:31:47+00:00https://nhimg.org/faq/how-do-attackers-use-timeroasting/2026-10-20T16:31:50+00:00https://nhimg.org/faq/how-can-security-teams-detect-active-directory-acl-abuse/2026-10-20T16:31:54+00:00https://nhimg.org/faq/how-do-organisations-get-started-with-microsoft-entra-registered-device/2026-10-20T16:31:58+00:00https://nhimg.org/faq/how-do-you-secure-nt-lan-manager-version-2-ntlmv2/2026-10-20T16:32:02+00:00https://nhimg.org/faq/how-do-you-use-group-policy-gpo-script-safely/2026-10-20T16:32:04+00:00https://nhimg.org/faq/how-does-protected-actions-work/2026-10-20T16:32:07+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-google-cloud-storage-object-viewer-role/2026-10-20T16:32:10+00:00https://nhimg.org/faq/what-does-readlapspassword-look-like-in-a-real-intrusion/2026-10-20T16:32:12+00:00https://nhimg.org/faq/what-are-common-mistakes-with-microsoft-entra/2026-10-20T16:32:15+00:00https://nhimg.org/faq/what-is-an-example-of-microsoft-entra-joined-device-in-practice/2026-10-20T16:32:18+00:00https://nhimg.org/faq/what-risks-does-federation-with-microsoft-entra-id-reduce/2026-10-20T16:32:23+00:00https://nhimg.org/faq/which-logs-show-evidence-of-readgmsapassword/2026-10-20T16:32:26+00:00https://nhimg.org/faq/what-risks-does-a-microsoft-entra-hybrid-joined-device-reduce/2026-10-20T16:32:28+00:00https://nhimg.org/faq/why-does-cross-tenant-synchronisation-matter-for-security-teams/2026-10-20T16:32:37+00:00https://nhimg.org/faq/why-does-microsoft-entra-cloud-sync-matter-for-security-teams/2026-10-20T16:32:42+00:00https://nhimg.org/faq/how-do-attackers-abuse-sudo-i/2026-10-20T16:32:45+00:00https://nhimg.org/faq/what-permissions-does-the-aws-securityaudit-managed-policy-grant/2026-10-20T16:32:55+00:00https://nhimg.org/faq/how-do-organisations-get-started-with-the-jwt-audience-aud-claim/2026-10-20T16:32:58+00:00https://nhimg.org/faq/used-instead-aws-iamfullaccess-managed-policy-least-privilege/2026-10-20T16:33:07+00:00https://nhimg.org/faq/which-logs-show-evidence-of-syncjacking/2026-10-20T16:33:07+00:00https://nhimg.org/faq/how-do-organisations-get-started-with-the-jwt-authorised-party-azp-claim/2026-10-20T16:33:11+00:00https://nhimg.org/faq/what-risks-does-active-directory-privileged-groups-reduce/2026-10-20T16:33:19+00:00https://nhimg.org/faq/how-do-organisations-implement-context-aware-access/2026-10-20T16:33:24+00:00https://nhimg.org/faq/what-risks-does-a-rooted-device-reduce/2026-10-20T16:33:27+00:00https://nhimg.org/faq/how-do-testers-find-oauth-misconfiguration/2026-10-20T16:33:33+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-google-cloud-project-iam-admin-role/2026-10-20T16:33:36+00:00https://nhimg.org/faq/how-should-organisations-get-started-with-openid-connect-oidc-security/2026-10-20T16:33:47+00:00https://nhimg.org/faq/what-causes-a-conditional-access-policy-coverage-gap/2026-10-20T16:33:50+00:00https://nhimg.org/faq/how-do-organisations-get-started-with-delegated-tokens/2026-10-20T16:33:57+00:00https://nhimg.org/faq/security-risks-assigning-aws-awsssodirectoryadministrator-managed-policy/2026-10-20T16:34:15+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-aws-awsssoreadonly-managed-policy/2026-10-20T16:34:19+00:00https://nhimg.org/faq/security-risks-assigning-aws-awsssomasteraccountadministrator-managed-policy/2026-10-20T16:34:24+00:00https://nhimg.org/faq/why-does-single-sign-on-in-microsoft-entra-id-matter-for-security-teams/2026-10-20T16:34:27+00:00https://nhimg.org/faq/what-is-an-example-of-saml-assertion-consumer-service-acs-in-practice/2026-10-20T16:34:29+00:00https://nhimg.org/faq/security-risks-assigning-azure-virtual-machine-user-login-role/2026-10-20T16:34:33+00:00https://nhimg.org/faq/what-risks-does-an-oauth-resource-server-reduce/2026-10-20T16:34:40+00:00https://nhimg.org/faq/used-instead-aws-awsssomemberaccountadministrator-managed-policy-least-privilege/2026-10-20T16:34:44+00:00https://nhimg.org/faq/used-instead-aws-iamuserchangepassword-managed-policy-least-privilege/2026-10-20T16:34:47+00:00https://nhimg.org/faq/used-instead-azure-virtual-machine-administrator-login-role-least-privilege/2026-10-20T16:34:52+00:00https://nhimg.org/faq/used-instead-google-cloud-security-admin-role-least-privilege/2026-10-20T16:34:55+00:00https://nhimg.org/faq/what-is-an-example-of-single-sign-on-sso-authentication-in-practice/2026-10-20T16:35:01+00:00https://nhimg.org/faq/what-permissions-does-the-google-cloud-organization-administrator-role-grant/2026-10-20T16:35:04+00:00https://nhimg.org/faq/what-is-an-example-of-single-page-application-spa-authentication-in-practice/2026-10-20T16:35:09+00:00https://nhimg.org/faq/which-logs-show-evidence-of-password-reset-bypass/2026-10-20T16:35:12+00:00https://nhimg.org/faq/how-do-organisations-get-started-with-automated-app-user-provisioning/2026-10-20T16:35:21+00:00https://nhimg.org/faq/how-do-organisations-get-started-with-inter-directory-provisioning/2026-10-20T16:35:23+00:00https://nhimg.org/faq/how-does-hr-driven-provisioning-work/2026-10-20T16:35:27+00:00https://nhimg.org/faq/how-do-organisations-implement-segregation-of-duties-sod-in-iam/2026-10-20T16:35:30+00:00https://nhimg.org/faq/what-is-an-example-of-my-access-portal-in-practice/2026-10-20T16:35:33+00:00https://nhimg.org/faq/what-are-common-mistakes-with-microsoft-entra-access-reviews/2026-10-20T16:35:37+00:00https://nhimg.org/faq/why-does-pluggable-authentication-modules-pam-matter-for-security-teams/2026-10-20T16:35:41+00:00https://nhimg.org/faq/why-does-the-jwt-scope-claim-matter-for-security-teams/2026-10-20T16:35:44+00:00https://nhimg.org/faq/why-does-microsoft-entra-provisioning-agent-matter-for-security-teams/2026-10-20T16:35:48+00:00https://nhimg.org/faq/what-risks-does-microsoft-entra-identity-secure-score-reduce/2026-10-20T16:35:53+00:00https://nhimg.org/faq/how-can-organisations-defend-against-scattered-lapsus-hunters/2026-10-20T16:35:57+00:00https://nhimg.org/faq/what-are-common-mistakes-with-microsoft-entra-id-protection/2026-10-20T16:36:02+00:00https://nhimg.org/faq/which-logs-show-evidence-of-targeted-kerberoasting/2026-10-20T16:36:06+00:00https://nhimg.org/faq/how-do-organisations-get-started-with-anomalous-token-detection/2026-10-20T16:36:09+00:00https://nhimg.org/faq/how-can-defenders-detect-malicious-use-of-trycloudflare/2026-10-20T16:36:13+00:00https://nhimg.org/faq/how-do-defenders-use-google-authenticator/2026-10-20T16:36:16+00:00https://nhimg.org/faq/how-do-organisations-get-started-with-hardware-mfa/2026-10-20T16:36:18+00:00https://nhimg.org/faq/what-are-the-common-vulnerabilities-in-transport-layer-security-12/2026-10-20T16:36:24+00:00https://nhimg.org/faq/what-is-an-example-of-microsoft-global-secure-access-in-practice/2026-10-20T16:36:27+00:00https://nhimg.org/faq/what-is-an-example-of-firewall-authentication-in-practice/2026-10-20T16:36:32+00:00https://nhimg.org/faq/you-audit-who-holds-aws-amazonecstaskexecutionrolepolicy-managed-policy/2026-10-20T16:36:35+00:00https://nhimg.org/faq/you-audit-who-holds-aws-awslambdavpcaccessexecutionrole-managed-policy/2026-10-20T16:36:38+00:00https://nhimg.org/faq/how-do-organisations-get-started-with-token-lifecycle-management/2026-10-20T16:36:44+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-google-cloud-service-account-token-creator-role/2026-10-20T16:36:48+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-google-cloud-service-account-user-role/2026-10-20T16:36:51+00:00https://nhimg.org/faq/security-risks-assigning-aws-amazonssmautomationrole-managed-policy/2026-10-20T16:36:53+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-google-cloud-service-account-admin-role/2026-10-20T16:36:58+00:00https://nhimg.org/faq/security-risks-assigning-aws-amazonssmmanagedec2instancedefaultpolicy-managed/2026-10-20T16:37:00+00:00https://nhimg.org/faq/security-risks-assigning-aws-iamselfmanageservicespecificcredentials-managed/2026-10-20T16:37:05+00:00https://nhimg.org/faq/what-permissions-does-the-google-cloud-service-account-creator-role-grant/2026-10-20T16:37:11+00:00https://nhimg.org/faq/what-risks-does-owasp-non-human-identities-top-10-reduce/2026-10-20T16:37:16+00:00https://nhimg.org/faq/used-instead-aws-amazoneksfargatepodexecutionrolepolicy-managed-policy-least/2026-10-20T16:37:21+00:00https://nhimg.org/faq/used-instead-aws-amazonssmmanagedinstancecore-managed-policy-least-privilege/2026-10-20T16:37:26+00:00https://nhimg.org/faq/used-instead-azure-managed-identity-contributor-role-least-privilege/2026-10-20T16:37:31+00:00https://nhimg.org/faq/used-instead-aws-awslambdabasicexecutionrole-managed-policy-least-privilege/2026-10-20T16:37:36+00:00https://nhimg.org/faq/replace-google-cloud-service-account-key-admin-role-least-privilege/2026-10-20T16:37:39+00:00https://nhimg.org/faq/what-should-replace-the-azure-managed-identity-operator-role-for-least-privilege/2026-10-20T16:37:44+00:00https://nhimg.org/faq/why-does-terraform-execution-identity-matter-for-security-teams/2026-10-20T16:37:47+00:00https://nhimg.org/faq/why-does-ot-identity-management-matter-for-security-teams/2026-10-20T16:37:53+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-aws-iamauditrootusercredentials-managed-policy/2026-10-20T16:37:59+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-aws-iamdeleterootusercredentials-managed-policy/2026-10-20T16:38:06+00:00https://nhimg.org/faq/what-are-common-mistakes-with-tier-0-identity-management/2026-10-20T16:38:12+00:00https://nhimg.org/faq/security-risks-assigning-aws-iamcreaterootuserpassword-managed-policy/2026-10-20T16:38:17+00:00https://nhimg.org/faq/which-frameworks-include-automated-password-rotation/2026-10-20T16:38:19+00:00https://nhimg.org/faq/how-do-you-use-openssl-s-client-connect-safely/2026-10-20T16:38:23+00:00https://nhimg.org/faq/common-vulnerabilities-automatic-certificate-management-environment-acme/2026-10-20T16:38:26+00:00https://nhimg.org/faq/what-mitigations-reduce-the-risk-of-ad-cs-domain-escalation/2026-10-20T16:38:28+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-aws-iamusersshkeys-managed-policy/2026-10-20T16:38:33+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-azure-key-vault-administrator-role/2026-10-20T16:38:42+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-azure-key-vault-certificates-officer-role/2026-10-20T16:38:45+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-azure-key-vault-crypto-officer-role/2026-10-20T16:38:48+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-google-cloud-secret-manager-secret-accessor-role/2026-10-20T16:38:52+00:00https://nhimg.org/faq/security-risks-assigning-google-cloud-secret-manager-admin-role/2026-10-20T16:38:56+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-azure-key-vault-secrets-user-role/2026-10-20T16:39:00+00:00https://nhimg.org/faq/what-evidence-shows-azure-key-vault-secret-rotation-is-working/2026-10-20T16:39:05+00:00https://nhimg.org/faq/how-does-azure-shared-access-signature-sas-token-work/2026-10-20T16:39:10+00:00https://nhimg.org/faq/permissions-aws-awskeymanagementservicepoweruser-managed-policy-grant/2026-10-20T16:39:14+00:00https://nhimg.org/faq/what-permissions-does-the-aws-secretsmanagerreadwrite-managed-policy-grant/2026-10-20T16:39:18+00:00https://nhimg.org/faq/what-permissions-does-the-azure-key-vault-data-access-administrator-role-grant/2026-10-20T16:39:23+00:00https://nhimg.org/faq/what-permissions-does-the-google-cloud-kms-admin-role-grant/2026-10-20T16:39:30+00:00https://nhimg.org/faq/used-instead-azure-key-vault-secrets-officer-role-least-privilege/2026-10-20T16:39:33+00:00https://nhimg.org/faq/used-instead-azure-key-vault-contributor-role-least-privilege/2026-10-20T16:39:40+00:00https://nhimg.org/faq/how-do-organisations-get-started-with-spiffe-standard/2026-10-20T16:39:43+00:00https://nhimg.org/faq/security-risks-assigning-google-cloud-workload-identity-user-role/2026-10-20T16:39:46+00:00https://nhimg.org/faq/how-does-ban-evasion-detection-improve-security/2026-10-20T16:39:50+00:00https://nhimg.org/faq/what-is-an-example-of-spire-workload-registration-in-practice/2026-10-20T16:39:52+00:00https://nhimg.org/faq/what-is-spire-server-used-for-in-security-testing/2026-10-20T16:39:56+00:00https://nhimg.org/faq/used-instead-google-cloud-workload-identity-pool-admin-role-least-privilege/2026-10-20T16:40:04+00:00https://nhimg.org/faq/how-do-you-enable-amazon-bedrock-model-invocation-logging/2026-10-20T16:40:06+00:00https://nhimg.org/faq/how-do-you-secure-amazon-sagemaker-models-notebooks-and-training-jobs/2026-10-20T16:40:10+00:00https://nhimg.org/faq/you-secure-azure-ai-search-azure-ai-services-private-network-access/2026-10-20T16:40:13+00:00https://nhimg.org/faq/why-should-root-access-be-disabled-on-amazon-sagemaker-notebook-instances/2026-10-20T16:40:18+00:00https://nhimg.org/faq/direct-internet-access-disabled-amazon-sagemaker-notebook-instances/2026-10-20T16:40:21+00:00https://nhimg.org/faq/how-do-you-secure-vertex-ai-workbench-instances-in-google-cloud/2026-10-20T16:40:23+00:00https://nhimg.org/faq/attackers-bypass-biometric-authentication-mobile-apps-you-prevent-it/2026-10-20T16:40:28+00:00https://nhimg.org/faq/attackers-bypass-jailbreak-detection-ios-apps-you-prevent-it/2026-10-20T16:40:33+00:00https://nhimg.org/faq/you-configure-aws-waf-azure-waf-cloud-armor-block-log4shell-exploitation/2026-10-20T16:40:39+00:00https://nhimg.org/faq/how-do-you-configure-azure-front-door-waf-to-block-log4shell-exploitation/2026-10-20T16:40:43+00:00https://nhimg.org/faq/how-do-you-configure-cors-securely-in-azure-app-service/2026-10-20T16:40:46+00:00https://nhimg.org/faq/how-do-attackers-bypass-root-detection-in-android-apps-and-how-do-you-prevent-it/2026-10-20T16:40:48+00:00https://nhimg.org/faq/how-do-you-configure-strong-tls-settings-with-app-transport-security-on-ios/2026-10-20T16:40:50+00:00https://nhimg.org/faq/how-do-you-configure-the-vercel-web-application-firewall-and-rate-limiting/2026-10-20T16:40:53+00:00https://nhimg.org/faq/how-do-you-cryptographically-bind-biometric-authentication-in-mobile-apps/2026-10-20T16:40:57+00:00https://nhimg.org/faq/how-do-you-detect-china-chopper-web-shell-activity-on-windows-servers/2026-10-20T16:41:02+00:00https://nhimg.org/faq/how-do-you-detect-cross-site-scripting-attempts-in-web-server-logs/2026-10-20T16:41:09+00:00https://nhimg.org/faq/how-do-you-detect-ognl-injection-exploitation-in-java-applications/2026-10-20T16:41:13+00:00https://nhimg.org/faq/how-do-you-detect-server-side-template-injection-attempts-in-web-logs/2026-10-20T16:41:16+00:00https://nhimg.org/faq/how-do-you-detect-sql-injection-attempts-in-web-server-uris/2026-10-20T16:41:20+00:00https://nhimg.org/faq/how-do-you-detect-sql-injection-attempts-using-database-error-messages/2026-10-20T16:41:23+00:00https://nhimg.org/faq/how-do-you-detect-path-traversal-exploitation-attempts-in-web-server-logs/2026-10-20T16:41:26+00:00https://nhimg.org/faq/how-do-you-detect-web-shell-activity-on-windows-servers/2026-10-20T16:41:29+00:00https://nhimg.org/faq/how-do-you-detect-web-shells-dropped-on-microsoft-exchange-servers/2026-10-20T16:41:35+00:00https://nhimg.org/faq/how-do-you-detect-web-shells-in-web-server-logs/2026-10-20T16:41:37+00:00https://nhimg.org/faq/how-do-you-detect-web-shells-on-linux-servers/2026-10-20T16:41:42+00:00https://nhimg.org/faq/how-do-you-enable-logging-for-aws-waf-web-acls/2026-10-20T16:41:44+00:00https://nhimg.org/faq/how-do-you-detect-xxe-exploitation-attempts-in-java-applications/2026-10-20T16:41:48+00:00https://nhimg.org/faq/how-do-you-enable-the-owasp-managed-waf-ruleset-in-cloudflare/2026-10-20T16:41:50+00:00https://nhimg.org/faq/how-do-you-enforce-https-with-always-use-https-and-hsts-in-cloudflare/2026-10-20T16:41:53+00:00https://nhimg.org/faq/how-do-you-generate-secure-random-numbers-in-mobile-apps/2026-10-20T16:41:57+00:00https://nhimg.org/faq/how-do-you-harden-mobile-apps-against-emulators-and-virtual-devices/2026-10-20T16:42:00+00:00https://nhimg.org/faq/how-do-you-find-and-secure-exposed-admin-interfaces-in-web-applications/2026-10-20T16:42:03+00:00https://nhimg.org/faq/how-do-you-limit-sensitive-data-exposure-through-ios-ipc-channels/2026-10-20T16:42:09+00:00https://nhimg.org/faq/how-do-you-mitigate-http-desync-attacks-on-aws-application-load-balancers/2026-10-20T16:42:11+00:00https://nhimg.org/faq/how-do-you-prevent-keyboard-caching-of-sensitive-input-fields-in-mobile-apps/2026-10-20T16:42:16+00:00https://nhimg.org/faq/how-do-you-implement-secure-error-and-exception-handling-in-mobile-apps/2026-10-20T16:42:18+00:00https://nhimg.org/faq/how-do-you-prevent-sensitive-data-leaking-through-the-ios-pasteboard/2026-10-20T16:42:23+00:00https://nhimg.org/faq/you-prevent-screenshots-screen-recording-sensitive-screens-android-apps/2026-10-20T16:42:24+00:00https://nhimg.org/faq/how-do-you-prevent-sql-injection-in-android-content-providers/2026-10-20T16:42:27+00:00https://nhimg.org/faq/you-protect-amazon-api-gateway-application-load-balancer-cloudfront-aws-waf/2026-10-20T16:42:33+00:00https://nhimg.org/faq/how-do-you-protect-an-amazon-cloudfront-distribution-with-aws-waf/2026-10-20T16:42:36+00:00https://nhimg.org/faq/how-do-you-protect-mobile-apps-against-runtime-hooking-with-tools-like-frida/2026-10-20T16:42:39+00:00https://nhimg.org/faq/you-stop-openapi-definitions-allowing-api-keys-credentials-over-cleartext-http/2026-10-20T16:42:45+00:00https://nhimg.org/faq/how-do-you-secure-an-amazon-api-gateway-rest-api/2026-10-20T16:42:48+00:00https://nhimg.org/faq/how-do-you-reduce-web-server-and-framework-fingerprinting/2026-10-20T16:42:53+00:00https://nhimg.org/faq/how-do-you-store-data-encrypted-in-a-mobile-app-sandbox-directory/2026-10-20T16:42:54+00:00https://nhimg.org/faq/how-do-you-use-safe-object-deserialisation-apis-in-mobile-apps/2026-10-20T16:42:55+00:00https://nhimg.org/faq/how-do-you-validate-input-in-mobile-app-deep-link-and-custom-url-scheme-handlers/2026-10-20T16:43:02+00:00https://nhimg.org/faq/how-do-you-validate-input-passed-to-mobile-app-webviews/2026-10-20T16:43:04+00:00https://nhimg.org/faq/when-should-javascript-be-disabled-in-mobile-app-webviews/2026-10-20T16:43:07+00:00https://nhimg.org/faq/which-encryption-algorithms-and-modes-should-mobile-apps-use/2026-10-20T16:43:10+00:00https://nhimg.org/faq/why-should-android-apps-set-an-up-to-date-minsdkversion/2026-10-20T16:43:12+00:00https://nhimg.org/faq/why-should-android-apps-use-explicit-intents-for-internal-ipc/2026-10-20T16:43:15+00:00https://nhimg.org/faq/why-should-android-apps-use-up-to-date-apk-signing-schemes/2026-10-20T16:43:17+00:00https://nhimg.org/faq/azure-waf-application-gateway-front-door-run-prevention-mode/2026-10-20T16:43:21+00:00https://nhimg.org/faq/why-should-android-apps-use-immutable-pendingintents-with-explicit-intents/2026-10-20T16:43:24+00:00https://nhimg.org/faq/why-should-content-provider-access-be-disabled-in-android-webviews/2026-10-20T16:43:27+00:00https://nhimg.org/faq/why-should-sensitive-input-use-the-system-keyboard-in-mobile-apps/2026-10-20T16:43:28+00:00https://nhimg.org/faq/how-do-you-configure-authorisers-to-protect-amazon-api-gateway-apis/2026-10-20T16:43:33+00:00https://nhimg.org/faq/how-do-you-configure-kubernetes-api-server-authorisation-modes-securely/2026-10-20T16:43:38+00:00https://nhimg.org/faq/why-should-verbose-and-debug-logging-be-disabled-in-production-mobile-app-builds/2026-10-20T16:43:40+00:00https://nhimg.org/faq/how-do-you-require-authorisation-on-amazon-api-gateway-methods-and-routes/2026-10-20T16:43:43+00:00https://nhimg.org/faq/why-should-legacy-abac-authorisation-be-disabled-on-gke-clusters/2026-10-20T16:43:47+00:00https://nhimg.org/faq/how-do-you-set-strict-base-permissions-for-repositories-in-a-github-organisation/2026-10-20T16:43:50+00:00https://nhimg.org/faq/how-do-you-apply-a-security-context-to-kubernetes-pods-and-containers/2026-10-20T16:43:54+00:00https://nhimg.org/faq/amazon-ssm-agent-hijacked-remote-access-tool-you-detect-it/2026-10-20T16:43:57+00:00https://nhimg.org/faq/how-do-you-block-project-wide-ssh-keys-on-google-compute-engine-vms/2026-10-20T16:44:04+00:00https://nhimg.org/faq/you-configure-alibaba-cloud-actiontrail-log-activity-across-all-regions/2026-10-20T16:44:07+00:00https://nhimg.org/faq/how-do-you-configure-admission-control-plugins-on-the-kubernetes-api-server/2026-10-20T16:44:12+00:00https://nhimg.org/faq/how-do-you-configure-amazon-s3-block-public-access-settings/2026-10-20T16:44:15+00:00https://nhimg.org/faq/how-do-you-configure-audit-logging-on-the-kubernetes-api-server/2026-10-20T16:44:20+00:00https://nhimg.org/faq/how-do-you-configure-auditing-for-azure-sql-server/2026-10-20T16:44:22+00:00https://nhimg.org/faq/you-configure-postgresql-logging-flags-google-cloud-sql-security-monitoring/2026-10-20T16:44:25+00:00https://nhimg.org/faq/how-do-you-create-gke-clusters-with-private-nodes/2026-10-20T16:44:28+00:00https://nhimg.org/faq/how-do-you-detect-aws-cloudtrail-logging-being-stopped-or-changed/2026-10-20T16:44:32+00:00https://nhimg.org/faq/how-do-you-deploy-azure-kubernetes-service-as-a-private-cluster/2026-10-20T16:44:36+00:00https://nhimg.org/faq/how-do-you-detect-aws-config-recorders-being-disabled/2026-10-20T16:44:41+00:00https://nhimg.org/faq/how-do-you-detect-aws-guardduty-being-disabled-or-modified/2026-10-20T16:44:43+00:00https://nhimg.org/faq/how-do-you-detect-aws-security-hub-findings-evasion/2026-10-20T16:44:48+00:00https://nhimg.org/faq/how-do-you-detect-break-glass-container-deployments-in-google-cloud/2026-10-20T16:44:51+00:00https://nhimg.org/faq/how-do-you-detect-changes-to-ec2-startup-scripts-in-aws/2026-10-20T16:44:54+00:00https://nhimg.org/faq/how-do-you-detect-containers-with-hostpath-mounts-in-kubernetes/2026-10-20T16:44:57+00:00https://nhimg.org/faq/how-do-you-detect-google-cloud-storage-bucket-enumeration/2026-10-20T16:45:00+00:00https://nhimg.org/faq/how-do-you-detect-enumeration-activity-in-aws-cloudtrail-logs/2026-10-20T16:45:03+00:00https://nhimg.org/faq/how-do-you-detect-malicious-kubernetes-cronjobs-used-for-persistence/2026-10-20T16:45:13+00:00https://nhimg.org/faq/how-do-you-detect-malicious-lambda-layers-being-attached-in-aws/2026-10-20T16:45:17+00:00https://nhimg.org/faq/how-do-you-detect-kubernetes-admission-controller-modifications/2026-10-20T16:45:19+00:00https://nhimg.org/faq/how-do-you-detect-privileged-containers-being-deployed-in-kubernetes/2026-10-20T16:45:23+00:00https://nhimg.org/faq/how-do-you-detect-pods-created-in-kubernetes-system-namespaces/2026-10-20T16:45:25+00:00https://nhimg.org/faq/how-do-you-detect-s3-bucket-enumeration-in-aws/2026-10-20T16:45:28+00:00https://nhimg.org/faq/how-do-you-detect-remote-command-execution-in-kubernetes-pod-containers/2026-10-20T16:45:34+00:00https://nhimg.org/faq/how-do-you-detect-sidecar-injection-into-running-kubernetes-deployments/2026-10-20T16:45:38+00:00https://nhimg.org/faq/you-detect-suppression-rules-being-created-microsoft-defender-cloud/2026-10-20T16:45:41+00:00https://nhimg.org/faq/how-do-you-disable-anonymous-blob-access-in-azure-storage/2026-10-20T16:45:46+00:00https://nhimg.org/faq/how-do-you-enable-access-logging-for-amazon-api-gateway/2026-10-20T16:45:49+00:00https://nhimg.org/faq/how-do-you-discover-shadow-it-applications-in-microsoft-defender-for-cloud-apps/2026-10-20T16:45:51+00:00https://nhimg.org/faq/how-do-you-enable-access-logging-for-aws-elastic-load-balancers/2026-10-20T16:45:56+00:00https://nhimg.org/faq/how-do-you-enable-amazon-guardduty-across-all-regions-in-an-aws-organization/2026-10-20T16:45:58+00:00https://nhimg.org/faq/how-do-you-enable-amazon-guardduty-and-why-does-it-matter/2026-10-20T16:46:03+00:00https://nhimg.org/faq/you-enable-amazon-guardduty-protection-plans-such-s3-eks-runtime-monitoring/2026-10-20T16:46:10+00:00https://nhimg.org/faq/how-do-you-enable-audit-logging-for-amazon-documentdb/2026-10-20T16:46:12+00:00https://nhimg.org/faq/how-do-you-enable-audit-logging-for-amazon-opensearch-service/2026-10-20T16:46:15+00:00https://nhimg.org/faq/how-do-you-enable-aws-cloudtrail-in-all-regions/2026-10-20T16:46:16+00:00https://nhimg.org/faq/how-do-you-enable-aws-config-in-all-regions/2026-10-20T16:46:18+00:00https://nhimg.org/faq/how-do-you-enable-aws-security-hub-across-an-aws-organization/2026-10-20T16:46:21+00:00https://nhimg.org/faq/how-do-you-enable-aws-config-recording-across-all-regions-and-accounts/2026-10-20T16:46:24+00:00https://nhimg.org/faq/how-do-you-enable-cloud-guard-in-oracle-cloud-infrastructure/2026-10-20T16:46:28+00:00https://nhimg.org/faq/how-do-you-enable-cloudtrail-log-file-integrity-validation-in-aws/2026-10-20T16:46:32+00:00https://nhimg.org/faq/how-do-you-enable-encryption-for-azure-managed-disks/2026-10-20T16:46:37+00:00https://nhimg.org/faq/how-do-you-enable-data-access-audit-logs-in-google-cloud/2026-10-20T16:46:42+00:00https://nhimg.org/faq/how-do-you-enable-control-plane-logging-in-amazon-eks/2026-10-20T16:46:45+00:00https://nhimg.org/faq/how-do-you-enable-logging-of-ecs-exec-sessions-in-amazon-ecs/2026-10-20T16:46:45+00:00https://nhimg.org/faq/how-do-you-enable-microsoft-defender-for-cloud-plans-across-azure-subscriptions/2026-10-20T16:46:49+00:00https://nhimg.org/faq/how-do-you-enable-pgaudit-for-cloud-sql-for-postgresql/2026-10-20T16:46:50+00:00https://nhimg.org/faq/how-do-you-enable-server-access-logging-for-amazon-s3-buckets/2026-10-20T16:46:57+00:00https://nhimg.org/faq/how-do-you-enable-shielded-gke-nodes-with-secure-boot-and-integrity-monitoring/2026-10-20T16:47:01+00:00https://nhimg.org/faq/how-do-you-enable-trusted-launch-with-secure-boot-and-vtpm-on-azure-vms/2026-10-20T16:47:06+00:00https://nhimg.org/faq/how-do-you-enable-vcn-flow-logs-in-oracle-cloud-infrastructure/2026-10-20T16:47:08+00:00https://nhimg.org/faq/how-do-you-enable-vpc-flow-logs-for-google-cloud-subnets/2026-10-20T16:47:11+00:00https://nhimg.org/faq/how-do-you-enforce-https-only-traffic-on-azure-storage-accounts/2026-10-20T16:47:14+00:00https://nhimg.org/faq/how-do-you-enforce-imdsv2-on-amazon-ec2-instances/2026-10-20T16:47:16+00:00https://nhimg.org/faq/how-do-you-enforce-pod-security-standards-in-kubernetes/2026-10-20T16:47:21+00:00https://nhimg.org/faq/how-do-you-enforce-image-signature-and-certificate-validation-in-openstack/2026-10-20T16:47:24+00:00https://nhimg.org/faq/how-do-you-enforce-public-access-prevention-on-google-cloud-storage-buckets/2026-10-20T16:47:30+00:00https://nhimg.org/faq/how-do-you-ensure-aws-cloudtrail-logging-is-enabled-in-every-region/2026-10-20T16:47:33+00:00https://nhimg.org/faq/how-do-you-identify-and-replace-deprecated-aws-lambda-runtimes/2026-10-20T16:47:35+00:00https://nhimg.org/faq/how-do-you-log-s3-object-level-data-events-in-aws-cloudtrail/2026-10-20T16:47:39+00:00https://nhimg.org/faq/how-do-you-prevent-a-gke-control-plane-from-being-publicly-accessible/2026-10-20T16:47:44+00:00https://nhimg.org/faq/how-do-you-prevent-amazon-ec2-amis-from-being-shared-publicly/2026-10-20T16:47:46+00:00https://nhimg.org/faq/how-do-you-prevent-amazon-rds-databases-from-being-publicly-accessible/2026-10-20T16:47:48+00:00https://nhimg.org/faq/how-do-you-prevent-anonymous-public-access-to-azure-blob-storage-containers/2026-10-20T16:47:53+00:00https://nhimg.org/faq/how-do-you-prevent-aws-lambda-functions-from-being-publicly-accessible/2026-10-20T16:47:56+00:00https://nhimg.org/faq/how-do-you-prevent-google-cloud-functions-from-being-publicly-invocable/2026-10-20T16:47:59+00:00https://nhimg.org/faq/how-do-you-prevent-google-cloud-run-services-from-being-publicly-accessible/2026-10-20T16:48:01+00:00https://nhimg.org/faq/how-do-you-prevent-google-cloud-storage-buckets-from-being-publicly-accessible/2026-10-20T16:48:06+00:00https://nhimg.org/faq/you-prevent-openstack-compute-instances-being-exposed-internet/2026-10-20T16:48:10+00:00https://nhimg.org/faq/how-do-you-prevent-huawei-cloud-obs-buckets-from-being-publicly-accessible/2026-10-20T16:48:11+00:00https://nhimg.org/faq/how-do-you-prevent-openstack-images-being-publicly-visible-to-all-tenants/2026-10-20T16:48:14+00:00https://nhimg.org/faq/how-do-you-prevent-oracle-cloud-object-storage-buckets-being-public/2026-10-20T16:48:17+00:00https://nhimg.org/faq/you-prevent-privileged-containers-host-namespace-sharing-amazon-ecs-task/2026-10-20T16:48:21+00:00https://nhimg.org/faq/how-do-you-prevent-public-access-through-amazon-sns-and-sqs-resource-policies/2026-10-20T16:48:24+00:00https://nhimg.org/faq/how-do-you-prevent-public-access-to-aws-lambda-functions-and-function-urls/2026-10-20T16:48:29+00:00https://nhimg.org/faq/how-do-you-prevent-public-access-to-openstack-swift-object-storage-containers/2026-10-20T16:48:32+00:00https://nhimg.org/faq/how-do-you-protect-aws-cloudtrail-logs-against-tampering/2026-10-20T16:48:36+00:00https://nhimg.org/faq/how-do-you-restrict-access-to-the-aks-api-server-with-authorised-ip-ranges/2026-10-20T16:48:39+00:00https://nhimg.org/faq/how-do-you-restrict-ingress-settings-for-google-cloud-functions/2026-10-20T16:48:46+00:00https://nhimg.org/faq/how-do-you-restrict-aws-regions-with-service-control-policies/2026-10-20T16:48:49+00:00https://nhimg.org/faq/how-do-you-restrict-linux-capabilities-for-kubernetes-containers/2026-10-20T16:48:54+00:00https://nhimg.org/faq/how-do-you-restrict-linux-capabilities-such-as-net-raw-for-kubernetes-containers/2026-10-20T16:48:57+00:00https://nhimg.org/faq/you-restrict-kubernetes-api-server-kubelet-strong-tls-cipher-suites/2026-10-20T16:48:59+00:00https://nhimg.org/faq/how-do-you-secure-access-to-azure-container-registry/2026-10-20T16:49:03+00:00https://nhimg.org/faq/how-do-you-secure-alibaba-cloud-oss-buckets-against-public-access-and-data-loss/2026-10-20T16:49:07+00:00https://nhimg.org/faq/how-do-you-secure-amazon-ecs-task-definitions-against-container-escape/2026-10-20T16:49:10+00:00https://nhimg.org/faq/how-do-you-secure-an-alibaba-cloud-container-service-for-kubernetes-ack-cluster/2026-10-20T16:49:14+00:00https://nhimg.org/faq/how-do-you-secure-an-amazon-opensearch-service-domain/2026-10-20T16:49:17+00:00https://nhimg.org/faq/how-do-you-secure-an-azure-app-service-web-app/2026-10-20T16:49:22+00:00https://nhimg.org/faq/how-do-you-secure-an-azure-kubernetes-service-aks-cluster/2026-10-20T16:49:26+00:00https://nhimg.org/faq/how-do-you-secure-aws-lambda-function-urls-with-authentication/2026-10-20T16:49:30+00:00https://nhimg.org/faq/how-do-you-secure-etcd-communication-with-tls-in-kubernetes/2026-10-20T16:49:33+00:00https://nhimg.org/faq/how-do-you-secure-or-disable-the-amazon-eks-cluster-public-endpoint/2026-10-20T16:49:36+00:00https://nhimg.org/faq/how-do-you-secure-kubernetes-api-server-to-kubelet-communication-with-tls/2026-10-20T16:49:39+00:00https://nhimg.org/faq/how-do-you-secure-the-amazon-eks-cluster-api-endpoint/2026-10-20T16:49:42+00:00https://nhimg.org/faq/how-do-you-secure-the-kubelet-against-unauthorised-access/2026-10-20T16:49:46+00:00https://nhimg.org/faq/how-do-you-send-azure-activity-logs-to-a-log-analytics-workspace/2026-10-20T16:49:52+00:00https://nhimg.org/faq/how-do-you-set-a-default-seccomp-profile-for-kubernetes-pods/2026-10-20T16:49:57+00:00https://nhimg.org/faq/you-set-up-log-monitoring-alerts-security-events-alibaba-cloud-actiontrail/2026-10-20T16:50:00+00:00https://nhimg.org/faq/how-do-you-stop-aws-ebs-and-rds-snapshots-from-being-shared-publicly/2026-10-20T16:50:04+00:00https://nhimg.org/faq/how-do-you-stop-amazon-s3-buckets-from-being-publicly-readable-or-writable/2026-10-20T16:50:06+00:00https://nhimg.org/faq/how-do-you-use-origin-access-control-to-secure-s3-origins-in-amazon-cloudfront/2026-10-20T16:50:10+00:00https://nhimg.org/faq/azure-database-postgresql-server-parameters-enabled-security-logging/2026-10-20T16:50:14+00:00https://nhimg.org/faq/how-do-you-use-the-azure-policy-add-on-to-enforce-security-in-aks/2026-10-20T16:50:19+00:00https://nhimg.org/faq/why-should-allowprivilegeescalation-be-set-to-false-for-kubernetes-containers/2026-10-20T16:50:22+00:00https://nhimg.org/faq/why-should-amazon-ecs-containers-use-read-only-root-filesystems/2026-10-20T16:50:27+00:00https://nhimg.org/faq/why-should-aws-systems-manager-documents-not-be-shared-publicly/2026-10-20T16:50:32+00:00https://nhimg.org/faq/why-should-kubernetes-containers-not-run-in-privileged-mode/2026-10-20T16:50:36+00:00https://nhimg.org/faq/why-should-ftp-deployments-be-disabled-in-azure-app-service/2026-10-20T16:50:38+00:00https://nhimg.org/faq/why-should-kubernetes-pods-not-share-the-host-ipc-network-or-pid-namespaces/2026-10-20T16:50:42+00:00https://nhimg.org/faq/why-should-remote-debugging-be-disabled-in-azure-app-service/2026-10-20T16:50:45+00:00https://nhimg.org/faq/serial-port-access-disabled-cloud-virtual-machines-such-google-compute-engine/2026-10-20T16:50:50+00:00https://nhimg.org/faq/why-should-kubernetes-containers-use-a-read-only-root-filesystem/2026-10-20T16:50:53+00:00https://nhimg.org/faq/why-should-the-azure-container-registry-admin-account-be-disabled/2026-10-20T16:50:57+00:00https://nhimg.org/faq/why-should-the-docker-daemon-socket-never-be-mounted-into-containers/2026-10-20T16:51:00+00:00https://nhimg.org/faq/why-should-the-ec2-instance-metadata-response-hop-limit-be-set-to-1/2026-10-20T16:51:04+00:00https://nhimg.org/faq/why-should-the-kubernetes-api-server-insecure-port-and-bind-address-be-disabled/2026-10-20T16:51:09+00:00https://nhimg.org/faq/why-should-uniform-bucket-level-access-be-enabled-on-google-cloud-storage/2026-10-20T16:51:13+00:00https://nhimg.org/faq/why-should-the-kubernetes-dashboard-not-be-deployed-in-production-clusters/2026-10-20T16:51:16+00:00https://nhimg.org/faq/you-apply-sensitivity-labels-microsoft-365-groups-microsoft-entra-id/2026-10-20T16:51:20+00:00https://nhimg.org/faq/how-do-you-block-onedrive-sync-from-unmanaged-devices-in-microsoft-365/2026-10-20T16:51:22+00:00https://nhimg.org/faq/how-do-you-configure-automatic-key-rotation-for-aws-kms-keys/2026-10-20T16:51:25+00:00https://nhimg.org/faq/how-do-you-configure-dlp-policies-for-google-drive/2026-10-20T16:51:29+00:00https://nhimg.org/faq/you-configure-encryption-amazon-emr-clusters-security-configurations/2026-10-20T16:51:32+00:00https://nhimg.org/faq/how-do-you-detect-bitlocker-key-retrieval-from-microsoft-entra-id/2026-10-20T16:51:36+00:00https://nhimg.org/faq/how-do-you-detect-data-exfiltration-to-unsanctioned-apps-from-microsoft-365/2026-10-20T16:51:41+00:00https://nhimg.org/faq/you-detect-data-being-compressed-password-protected-exfiltration-windows/2026-10-20T16:51:44+00:00https://nhimg.org/faq/how-do-you-detect-data-staged-for-exfiltration-with-powershell-compression/2026-10-20T16:51:49+00:00https://nhimg.org/faq/how-do-you-detect-data-exfiltration-with-wget-or-curl-on-linux/2026-10-20T16:51:51+00:00https://nhimg.org/faq/how-do-you-detect-ebs-default-encryption-being-disabled-in-aws/2026-10-20T16:51:54+00:00https://nhimg.org/faq/you-detect-dns-queries-file-sharing-sites-such-mega-used-exfiltration/2026-10-20T16:51:58+00:00https://nhimg.org/faq/how-do-you-detect-ebs-snapshot-exfiltration-in-aws/2026-10-20T16:51:59+00:00https://nhimg.org/faq/how-do-you-detect-exchange-mailbox-exports-to-file-shares/2026-10-20T16:52:04+00:00https://nhimg.org/faq/how-do-you-detect-full-data-or-user-detail-exports-in-bitbucket/2026-10-20T16:52:09+00:00https://nhimg.org/faq/how-do-you-detect-pst-exports-via-ediscovery-in-microsoft-365/2026-10-20T16:52:12+00:00https://nhimg.org/faq/how-do-you-detect-rclone-being-used-for-data-exfiltration-on-windows/2026-10-20T16:52:15+00:00https://nhimg.org/faq/how-do-you-detect-windows-recall-being-enabled-without-authorisation/2026-10-20T16:52:19+00:00https://nhimg.org/faq/how-do-you-detect-xp-cmdshell-being-enabled-or-abused-in-microsoft-sql-server/2026-10-20T16:52:22+00:00https://nhimg.org/faq/how-do-you-detect-rclone-data-exfiltration-in-proxy-logs/2026-10-20T16:52:26+00:00https://nhimg.org/faq/you-enable-auth-transit-encryption-google-cloud-memorystore-redis/2026-10-20T16:52:29+00:00https://nhimg.org/faq/how-do-you-detect-sql-server-spawning-suspicious-processes-on-windows/2026-10-20T16:52:32+00:00https://nhimg.org/faq/how-do-you-enable-automatic-key-rotation-for-google-cloud-kms-keys/2026-10-20T16:52:36+00:00https://nhimg.org/faq/how-do-you-enable-automatic-key-rotation-in-azure-key-vault/2026-10-20T16:52:39+00:00https://nhimg.org/faq/how-do-you-enable-database-auditing-in-mongodb-atlas/2026-10-20T16:52:43+00:00https://nhimg.org/faq/how-do-you-enable-default-encryption-for-amazon-s3-buckets/2026-10-20T16:52:46+00:00https://nhimg.org/faq/how-do-you-enable-ebs-encryption-by-default-in-aws/2026-10-20T16:52:49+00:00https://nhimg.org/faq/how-do-you-enable-encryption-at-rest-for-amazon-rds-and-aurora-databases/2026-10-20T16:52:52+00:00https://nhimg.org/faq/how-do-you-enable-encryption-at-rest-with-customer-managed-keys-in-mongodb-atlas/2026-10-20T16:52:57+00:00https://nhimg.org/faq/how-do-you-enable-server-side-encryption-for-amazon-sns-topics-and-sqs-queues/2026-10-20T16:52:59+00:00https://nhimg.org/faq/how-do-you-enable-transparent-data-encryption-for-azure-sql-databases/2026-10-20T16:53:03+00:00https://nhimg.org/faq/how-do-you-enable-volume-encryption-in-openstack-cinder/2026-10-20T16:53:07+00:00https://nhimg.org/faq/how-do-you-encrypt-amazon-elasticache-for-redis-data-at-rest-and-in-transit/2026-10-20T16:53:10+00:00https://nhimg.org/faq/how-do-you-encrypt-amazon-opensearch-service-domains-at-rest-and-in-transit/2026-10-20T16:53:11+00:00https://nhimg.org/faq/how-do-you-encrypt-amazon-efs-file-systems/2026-10-20T16:53:15+00:00https://nhimg.org/faq/how-do-you-encrypt-amazon-rds-databases-and-snapshots-at-rest/2026-10-20T16:53:18+00:00https://nhimg.org/faq/how-do-you-encrypt-ecs-disks-in-alibaba-cloud/2026-10-20T16:53:22+00:00https://nhimg.org/faq/how-do-you-encrypt-amazon-redshift-clusters-at-rest/2026-10-20T16:53:23+00:00https://nhimg.org/faq/how-do-you-encrypt-oracle-cloud-storage-with-customer-managed-keys/2026-10-20T16:53:26+00:00https://nhimg.org/faq/how-do-you-enforce-https-only-access-to-amazon-s3-buckets-with-a-bucket-policy/2026-10-20T16:53:30+00:00https://nhimg.org/faq/you-enforce-ssl-connections-azure-database-mysql-postgresql-mariadb/2026-10-20T16:53:34+00:00https://nhimg.org/faq/how-do-you-enforce-ssltls-connections-to-amazon-rds-databases/2026-10-20T16:53:36+00:00https://nhimg.org/faq/you-prevent-azure-sql-databases-allowing-inbound-access-any-ip-address/2026-10-20T16:53:42+00:00https://nhimg.org/faq/how-do-you-prevent-bigquery-datasets-and-tables-being-publicly-accessible/2026-10-20T16:53:42+00:00https://nhimg.org/faq/how-do-you-prevent-google-cloud-sql-instances-being-open-to-the-world/2026-10-20T16:53:49+00:00https://nhimg.org/faq/how-do-you-prevent-google-cloud-sql-instances-having-a-public-ip-address/2026-10-20T16:53:51+00:00https://nhimg.org/faq/how-do-you-require-ssl-for-google-cloud-sql-connections/2026-10-20T16:53:55+00:00https://nhimg.org/faq/how-do-you-restrict-external-file-sharing-in-google-workspace-drive/2026-10-20T16:53:58+00:00https://nhimg.org/faq/how-do-you-restrict-external-sharing-in-sharepoint-online-and-onedrive/2026-10-20T16:54:02+00:00https://nhimg.org/faq/how-do-you-secure-google-cloud-sql-instances-against-public-access/2026-10-20T16:54:08+00:00https://nhimg.org/faq/how-do-you-secure-an-alibaba-cloud-rds-instance/2026-10-20T16:54:09+00:00https://nhimg.org/faq/how-do-you-use-amazon-macie-for-sensitive-data-discovery-in-s3/2026-10-20T16:54:12+00:00https://nhimg.org/faq/why-should-aws-kms-key-policies-not-allow-public-access/2026-10-20T16:54:16+00:00https://nhimg.org/faq/how-do-you-configure-branch-protection-rules-on-github-default-branches/2026-10-20T16:54:20+00:00https://nhimg.org/faq/how-do-you-use-vpc-service-controls-to-protect-google-cloud-storage-data/2026-10-20T16:54:24+00:00https://nhimg.org/faq/how-do-you-configure-github-branch-protection-rules-to-secure-your-main-branch/2026-10-20T16:54:26+00:00https://nhimg.org/faq/how-do-you-configure-protected-branches-in-gitlab-to-block-force-pushes/2026-10-20T16:54:32+00:00https://nhimg.org/faq/how-do-you-detect-github-repositories-or-organisations-being-transferred/2026-10-20T16:54:36+00:00https://nhimg.org/faq/how-do-you-detect-changes-to-github-self-hosted-runners/2026-10-20T16:54:38+00:00https://nhimg.org/faq/how-do-you-detect-high-risk-security-settings-being-disabled-in-github/2026-10-20T16:54:41+00:00https://nhimg.org/faq/how-do-you-disable-anonymous-pull-access-in-azure-container-registry/2026-10-20T16:54:47+00:00https://nhimg.org/faq/how-do-you-enable-an-ip-allow-list-for-a-github-organisation/2026-10-20T16:54:48+00:00https://nhimg.org/faq/you-enable-deployment-protection-vercel-preview-production-deployments/2026-10-20T16:54:53+00:00https://nhimg.org/faq/how-do-you-enable-image-scanning-on-push-in-amazon-ecr/2026-10-20T16:54:54+00:00https://nhimg.org/faq/how-do-you-detect-suspicious-curl-or-netcat-use-in-cicd-pipeline-scripts/2026-10-20T16:54:57+00:00https://nhimg.org/faq/how-do-you-ensure-ansible-only-installs-packages-with-valid-signatures/2026-10-20T16:55:01+00:00https://nhimg.org/faq/how-do-you-enable-vulnerability-scanning-for-amazon-ecr-container-images/2026-10-20T16:55:07+00:00https://nhimg.org/faq/how-do-you-find-security-issues-in-github-actions-workflows-with-zizmor/2026-10-20T16:55:12+00:00https://nhimg.org/faq/how-do-you-require-multiple-approvals-for-gitlab-merge-requests/2026-10-20T16:55:14+00:00https://nhimg.org/faq/how-do-you-require-pull-request-approvals-with-github-branch-protection/2026-10-20T16:55:17+00:00https://nhimg.org/faq/how-do-you-require-signed-commits-on-github-branches/2026-10-20T16:55:19+00:00https://nhimg.org/faq/how-do-you-prevent-shell-injection-in-github-actions-run-steps/2026-10-20T16:55:25+00:00https://nhimg.org/faq/how-do-you-restrict-repository-creation-in-a-github-organisation/2026-10-20T16:55:26+00:00https://nhimg.org/faq/how-do-you-secure-aws-codebuild-projects-against-cicd-supply-chain-attacks/2026-10-20T16:55:32+00:00https://nhimg.org/faq/how-do-you-stop-ansible-tasks-disabling-tls-certificate-validation/2026-10-20T16:55:38+00:00https://nhimg.org/faq/why-is-actions-allow-unsecure-commands-dangerous-in-github-actions/2026-10-20T16:55:46+00:00https://nhimg.org/faq/why-should-amazon-ecr-image-tags-be-immutable/2026-10-20T16:55:46+00:00https://nhimg.org/faq/why-should-copy-be-used-instead-of-add-in-dockerfiles/2026-10-20T16:55:48+00:00https://nhimg.org/faq/cicd-pipeline-container-images-pinned-digest-instead-latest-tag/2026-10-20T16:55:51+00:00https://nhimg.org/faq/why-should-dockerfiles-run-containers-as-a-non-root-user/2026-10-20T16:55:53+00:00https://nhimg.org/faq/why-should-github-actions-be-prevented-from-approving-pull-requests/2026-10-20T16:55:56+00:00https://nhimg.org/faq/why-should-privileged-mode-be-disabled-in-aws-codebuild-projects/2026-10-20T16:56:01+00:00https://nhimg.org/faq/you-block-automatic-email-forwarding-external-domains-exchange-online/2026-10-20T16:56:06+00:00https://nhimg.org/faq/you-block-microsoft-teams-users-communicating-unmanaged-accounts/2026-10-20T16:56:10+00:00https://nhimg.org/faq/how-do-you-block-risky-attachment-types-in-microsoft-defender-for-office-365/2026-10-20T16:56:14+00:00https://nhimg.org/faq/how-do-you-configure-anti-phishing-policies-in-microsoft-defender-for-office-365/2026-10-20T16:56:19+00:00https://nhimg.org/faq/how-do-you-configure-gmail-attachment-and-link-protection-in-google-workspace/2026-10-20T16:56:19+00:00https://nhimg.org/faq/how-do-you-configure-dkim-spf-and-dmarc-records-in-cloudflare-dns/2026-10-20T16:56:21+00:00https://nhimg.org/faq/you-configure-safe-attachments-policies-microsoft-defender-office-365/2026-10-20T16:56:24+00:00https://nhimg.org/faq/how-do-you-disable-automatic-email-forwarding-in-google-workspace/2026-10-20T17:09:21+00:00https://nhimg.org/faq/how-do-you-disable-smtp-auth-in-exchange-online/2026-10-20T17:09:23+00:00https://nhimg.org/faq/how-do-you-detect-outlook-forms-and-home-page-persistence-used-by-attackers/2026-10-20T17:09:27+00:00https://nhimg.org/faq/how-do-you-detect-malicious-iso-files-used-in-phishing-attacks-on-windows/2026-10-20T17:09:29+00:00https://nhimg.org/faq/you-detect-suspicious-inbox-forwarding-manipulation-rules-microsoft-365/2026-10-20T17:09:32+00:00https://nhimg.org/faq/how-do-you-detect-double-extension-files-used-in-phishing-on-windows/2026-10-20T17:09:34+00:00https://nhimg.org/faq/how-do-you-enable-dkim-signing-for-amazon-ses-email-identities/2026-10-20T17:09:37+00:00https://nhimg.org/faq/how-do-you-configure-safe-links-in-microsoft-defender-for-office-365/2026-10-20T17:09:37+00:00https://nhimg.org/faq/how-do-you-enable-mailbox-auditing-in-exchange-online/2026-10-20T17:09:50+00:00https://nhimg.org/faq/you-protect-gmail-against-domain-employee-name-spoofing-google-workspace/2026-10-20T17:09:54+00:00https://nhimg.org/faq/how-do-you-set-up-dmarc-and-dkim-for-exchange-online-domains/2026-10-20T17:09:57+00:00https://nhimg.org/faq/how-do-you-secure-microsoft-teams-meetings-against-anonymous-and-external-users/2026-10-20T17:09:59+00:00https://nhimg.org/faq/how-do-attackers-bypass-amsi-on-windows-and-how-do-you-detect-it/2026-10-20T17:10:02+00:00https://nhimg.org/faq/aws-cli-abused-privilege-escalation-linux-you-prevent-it/2026-10-20T17:10:05+00:00https://nhimg.org/faq/how-do-you-detect-access-to-the-sudoers-file-on-linux/2026-10-20T17:10:08+00:00https://nhimg.org/faq/how-do-attackers-use-ntfs-alternate-data-streams-and-how-do-you-detect-it/2026-10-20T17:10:10+00:00https://nhimg.org/faq/how-do-you-detect-accessibility-feature-backdoors-such-as-sticky-keys-on-windows/2026-10-20T17:10:14+00:00https://nhimg.org/faq/you-detect-alwaysinstallelevated-abuse-privilege-escalation-windows/2026-10-20T17:10:20+00:00https://nhimg.org/faq/how-do-you-detect-and-fix-unquoted-service-path-vulnerabilities-on-windows/2026-10-20T17:10:27+00:00https://nhimg.org/faq/how-do-you-detect-amazon-ssm-agent-hijacking-on-linux/2026-10-20T17:10:31+00:00https://nhimg.org/faq/how-can-you-detect-appinit-dll-persistence-on-windows/2026-10-20T17:10:33+00:00https://nhimg.org/faq/how-can-you-detect-appinit-dlls-and-appcertdlls-persistence-on-windows/2026-10-20T17:10:35+00:00https://nhimg.org/faq/how-can-you-detect-application-shim-database-persistence-on-windows/2026-10-20T17:10:37+00:00https://nhimg.org/faq/how-can-you-detect-attacker-host-reconnaissance-commands-on-windows/2026-10-20T17:10:40+00:00https://nhimg.org/faq/how-can-you-detect-attackers-clearing-powershell-command-history-on-windows/2026-10-20T17:10:42+00:00https://nhimg.org/faq/how-can-you-detect-attackers-disabling-microsoft-defender-protections-on-windows/2026-10-20T17:10:53+00:00https://nhimg.org/faq/how-can-you-detect-attackers-enabling-or-weakening-rdp-settings-on-windows/2026-10-20T17:10:54+00:00https://nhimg.org/faq/how-can-you-detect-attackers-searching-windows-systems-for-stored-credentials/2026-10-20T17:11:00+00:00https://nhimg.org/faq/how-can-you-detect-attackers-tampering-with-sysmon-on-windows/2026-10-20T17:11:03+00:00https://nhimg.org/faq/how-can-you-detect-auditd-and-logging-configuration-changes-on-linux/2026-10-20T17:11:05+00:00https://nhimg.org/faq/how-can-you-detect-base64-encoded-commands-piped-to-a-shell-on-linux/2026-10-20T17:11:07+00:00https://nhimg.org/faq/how-can-you-detect-base64-encoded-powershell-commands-on-windows/2026-10-20T17:11:09+00:00https://nhimg.org/faq/how-can-you-detect-bits-job-persistence-and-malicious-downloads-on-windows/2026-10-20T17:11:13+00:00https://nhimg.org/faq/how-can-you-detect-bits-jobs-being-abused-to-download-malware-on-windows/2026-10-20T17:11:18+00:00https://nhimg.org/faq/you-detect-bitsadmin-downloading-unusual-ip-addresses-domains-windows/2026-10-20T17:11:20+00:00https://nhimg.org/faq/how-do-you-detect-boot-configuration-tampering-with-bcdedit-on-windows/2026-10-20T17:11:25+00:00https://nhimg.org/faq/how-do-you-detect-bpfdoor-backdoor-activity-on-linux/2026-10-20T17:11:29+00:00https://nhimg.org/faq/how-do-you-detect-certutil-being-abused-to-download-or-decode-files-on-windows/2026-10-20T17:11:32+00:00https://nhimg.org/faq/how-do-you-detect-cmstp-abuse-for-uac-bypass-on-windows/2026-10-20T17:11:36+00:00https://nhimg.org/faq/how-do-you-detect-copying-of-passwd-or-shadow-files-on-linux/2026-10-20T17:11:38+00:00https://nhimg.org/faq/how-do-you-detect-com-hijacking-persistence-on-windows/2026-10-20T17:11:41+00:00https://nhimg.org/faq/how-do-you-detect-credential-theft-from-windows-credential-manager/2026-10-20T17:11:45+00:00https://nhimg.org/faq/how-do-you-detect-credential-theft-from-volume-shadow-copies-on-windows/2026-10-20T17:11:48+00:00https://nhimg.org/faq/how-do-you-detect-crontab-modifications-used-for-persistence-on-linux/2026-10-20T17:11:51+00:00https://nhimg.org/faq/how-do-you-detect-cryptomining-activity-on-windows-endpoints/2026-10-20T17:11:59+00:00https://nhimg.org/faq/how-do-you-detect-crypto-mining-on-linux-hosts/2026-10-20T17:12:00+00:00https://nhimg.org/faq/how-do-you-detect-esxi-account-creation-and-admin-permission-changes-via-esxcli/2026-10-20T17:12:07+00:00https://nhimg.org/faq/how-do-you-detect-edr-silencing-through-windows-filtering-platform-rules/2026-10-20T17:12:09+00:00https://nhimg.org/faq/how-do-you-detect-esxi-discovery-activity-via-esxcli/2026-10-20T17:12:12+00:00https://nhimg.org/faq/how-do-you-detect-etw-tampering-used-to-blind-windows-security-monitoring/2026-10-20T17:12:14+00:00https://nhimg.org/faq/how-do-you-detect-fake-password-prompts-used-for-input-capture-on-macos/2026-10-20T17:12:18+00:00https://nhimg.org/faq/how-do-you-detect-execution-from-ntfs-alternate-data-streams-on-windows/2026-10-20T17:12:20+00:00https://nhimg.org/faq/how-do-you-detect-gatekeeper-bypass-via-xattr-on-macos/2026-10-20T17:12:24+00:00https://nhimg.org/faq/how-do-you-detect-hacking-tool-execution-on-linux/2026-10-20T17:12:26+00:00https://nhimg.org/faq/how-do-you-detect-hidden-local-user-accounts-on-windows/2026-10-20T17:12:32+00:00https://nhimg.org/faq/how-do-you-detect-hidden-scheduled-tasks-on-windows/2026-10-20T17:12:37+00:00https://nhimg.org/faq/how-do-you-detect-hypervisor-protected-code-integrity-being-disabled-on-windows/2026-10-20T17:12:39+00:00https://nhimg.org/faq/how-do-you-detect-iis-http-logging-being-disabled-on-windows-servers/2026-10-20T17:12:44+00:00https://nhimg.org/faq/how-do-you-detect-java-applications-spawning-suspicious-shells-on-windows/2026-10-20T17:12:47+00:00https://nhimg.org/faq/how-do-you-detect-invoke-obfuscation-powershell-obfuscation-on-windows/2026-10-20T17:12:48+00:00https://nhimg.org/faq/how-do-you-detect-host-and-user-discovery-commands-such-as-whoami-on-windows/2026-10-20T17:12:52+00:00https://nhimg.org/faq/how-do-you-detect-jxa-in-memory-execution-via-osascript-on-macos/2026-10-20T17:12:55+00:00https://nhimg.org/faq/how-do-you-detect-immutable-file-attributes-being-removed-on-linux/2026-10-20T17:12:57+00:00https://nhimg.org/faq/how-do-you-detect-kernel-modules-loaded-via-insmod-on-linux/2026-10-20T17:12:59+00:00https://nhimg.org/faq/how-do-you-detect-keychain-credential-access-on-macos/2026-10-20T17:13:05+00:00https://nhimg.org/faq/how-do-you-detect-launch-agent-or-launch-daemon-persistence-on-macos/2026-10-20T17:13:09+00:00https://nhimg.org/faq/how-do-you-detect-keylogger-activity-on-windows-endpoints/2026-10-20T17:13:10+00:00https://nhimg.org/faq/how-do-you-detect-ldsopreload-code-injection-on-linux/2026-10-20T17:13:15+00:00https://nhimg.org/faq/how-do-you-detect-linux-capabilities-discovery/2026-10-20T17:13:20+00:00https://nhimg.org/faq/how-do-you-detect-local-or-hidden-user-account-creation-on-macos/2026-10-20T17:13:23+00:00https://nhimg.org/faq/how-do-you-detect-living-off-the-land-binary-abuse-on-windows/2026-10-20T17:13:25+00:00https://nhimg.org/faq/how-do-you-detect-logon-script-persistence-on-windows/2026-10-20T17:13:27+00:00https://nhimg.org/faq/how-do-you-detect-lsass-credential-dumping-on-windows/2026-10-20T17:13:33+00:00https://nhimg.org/faq/you-detect-malicious-child-processes-spawned-microsoft-office-applications/2026-10-20T17:13:36+00:00https://nhimg.org/faq/how-do-you-detect-malicious-iis-module-installation/2026-10-20T17:13:38+00:00https://nhimg.org/faq/how-do-you-detect-malicious-mshtaexe-execution-on-windows/2026-10-20T17:13:42+00:00https://nhimg.org/faq/how-do-you-detect-malicious-msi-installations-with-msiexec-on-windows/2026-10-20T17:13:46+00:00https://nhimg.org/faq/how-do-you-detect-malicious-office-macro-execution-on-windows-endpoints/2026-10-20T17:13:48+00:00https://nhimg.org/faq/how-do-you-detect-malicious-scheduled-task-creation-on-windows/2026-10-20T17:13:50+00:00https://nhimg.org/faq/how-do-you-detect-malicious-shell-scripts-in-linux-profile-folders/2026-10-20T17:13:58+00:00https://nhimg.org/faq/how-do-you-detect-malicious-scheduled-task-execution-on-windows/2026-10-20T17:14:01+00:00https://nhimg.org/faq/how-do-you-detect-malicious-screenconnect-remote-command-execution-on-windows/2026-10-20T17:14:06+00:00https://nhimg.org/faq/how-do-you-detect-malicious-systemd-service-creation-on-linux/2026-10-20T17:14:08+00:00https://nhimg.org/faq/how-do-you-detect-malicious-security-support-providers-added-to-lsa-on-windows/2026-10-20T17:14:11+00:00https://nhimg.org/faq/how-do-you-detect-malicious-windows-service-installation/2026-10-20T17:14:13+00:00https://nhimg.org/faq/how-do-you-detect-malicious-windows-services-in-suspicious-paths/2026-10-20T17:14:15+00:00https://nhimg.org/faq/how-do-you-detect-malicious-wscript-and-cscript-droppers-on-windows/2026-10-20T17:14:18+00:00https://nhimg.org/faq/how-do-you-detect-malware-checking-its-public-ip-through-lookup-services/2026-10-20T17:14:23+00:00https://nhimg.org/faq/you-detect-malware-masquerading-windows-system-files-unusual-locations/2026-10-20T17:14:27+00:00https://nhimg.org/faq/how-do-you-detect-malware-stealing-saved-browser-passwords-on-windows/2026-10-20T17:14:31+00:00https://nhimg.org/faq/how-can-you-detect-masquerading-of-common-windows-processes/2026-10-20T17:14:35+00:00https://nhimg.org/faq/how-do-you-detect-msbuild-and-msxsl-abuse-to-bypass-application-control/2026-10-20T17:14:40+00:00https://nhimg.org/faq/you-detect-meterpreter-cobalt-strike-getsystem-privilege-escalation-windows/2026-10-20T17:14:43+00:00https://nhimg.org/faq/how-do-you-detect-new-user-account-creation-on-linux/2026-10-20T17:14:46+00:00https://nhimg.org/faq/you-detect-offensive-powershell-frameworks-malicious-cmdlets-windows/2026-10-20T17:14:48+00:00https://nhimg.org/faq/how-do-you-detect-pam-based-keylogging-on-linux/2026-10-20T17:14:51+00:00https://nhimg.org/faq/how-do-you-detect-persistence-via-sudoers-files-on-linux/2026-10-20T17:14:56+00:00https://nhimg.org/faq/how-do-you-detect-potato-privilege-escalation-tools-on-windows/2026-10-20T17:15:00+00:00https://nhimg.org/faq/how-do-you-detect-powershell-download-cradles-on-windows/2026-10-20T17:15:07+00:00https://nhimg.org/faq/how-do-you-detect-powershell-execution-policy-being-set-to-an-insecure-level/2026-10-20T17:15:12+00:00https://nhimg.org/faq/how-do-you-detect-powershell-empire-activity-on-windows/2026-10-20T17:15:14+00:00https://nhimg.org/faq/how-do-you-detect-powershell-profile-modification-used-for-persistence/2026-10-20T17:15:17+00:00https://nhimg.org/faq/how-do-you-detect-powershell-reverse-shell-connections-on-windows/2026-10-20T17:15:19+00:00https://nhimg.org/faq/how-do-you-detect-powershell-script-block-logging-being-disabled-on-windows/2026-10-20T17:15:21+00:00https://nhimg.org/faq/how-do-you-detect-powershell-version-2-downgrade-attacks-on-windows/2026-10-20T17:15:24+00:00https://nhimg.org/faq/how-do-you-detect-privilege-escalation-through-weak-windows-service-permissions/2026-10-20T17:15:29+00:00https://nhimg.org/faq/you-detect-process-hacker-system-informer-being-used-tamper-security-tools/2026-10-20T17:15:32+00:00https://nhimg.org/faq/how-do-you-detect-process-injection-via-remote-thread-creation-on-windows/2026-10-20T17:15:35+00:00https://nhimg.org/faq/how-do-you-detect-processes-masquerading-as-svchostexe-on-windows/2026-10-20T17:15:40+00:00https://nhimg.org/faq/how-do-you-detect-rdp-logons-from-public-ip-addresses-on-windows/2026-10-20T17:15:43+00:00https://nhimg.org/faq/how-do-you-detect-registry-autorun-key-persistence-on-windows/2026-10-20T17:15:47+00:00https://nhimg.org/faq/how-do-you-detect-remote-powershell-sessions-on-windows/2026-10-20T17:15:49+00:00https://nhimg.org/faq/how-do-you-detect-renamed-binaries-used-to-evade-detection-on-windows/2026-10-20T17:15:52+00:00https://nhimg.org/faq/how-do-you-detect-renamed-executables-by-matching-file-hashes/2026-10-20T17:15:54+00:00https://nhimg.org/faq/how-do-you-detect-reverse-shells-on-linux/2026-10-20T17:15:58+00:00https://nhimg.org/faq/how-do-you-detect-sam-and-system-registry-hive-dumping-on-windows/2026-10-20T17:16:02+00:00https://nhimg.org/faq/how-do-you-detect-screensaver-persistence-on-windows/2026-10-20T17:16:04+00:00https://nhimg.org/faq/how-do-you-detect-searches-for-credentials-in-files-on-linux/2026-10-20T17:16:10+00:00https://nhimg.org/faq/how-do-you-detect-security-tools-being-disabled-on-linux/2026-10-20T17:16:12+00:00https://nhimg.org/faq/how-do-you-detect-security-tools-being-disabled-on-macos/2026-10-20T17:16:14+00:00https://nhimg.org/faq/how-do-you-detect-setuid-and-setgid-abuse-on-linux/2026-10-20T17:16:16+00:00https://nhimg.org/faq/you-detect-shells-spawned-through-gtfobins-binaries-such-find-git-apt-linux/2026-10-20T17:16:20+00:00https://nhimg.org/faq/how-do-you-detect-startup-folder-persistence-on-windows/2026-10-20T17:16:23+00:00https://nhimg.org/faq/how-do-you-detect-suspicious-execution-from-the-tmp-directory-on-linux/2026-10-20T17:16:25+00:00https://nhimg.org/faq/how-do-you-detect-suspicious-file-downloads-with-curl-or-wget-on-windows/2026-10-20T17:16:28+00:00https://nhimg.org/faq/how-do-you-detect-suspicious-java-child-processes-on-linux/2026-10-20T17:16:35+00:00https://nhimg.org/faq/how-do-you-detect-suspicious-jamf-mdm-execution-on-macos/2026-10-20T17:16:37+00:00https://nhimg.org/faq/how-do-you-detect-suspicious-microsoft-office-child-processes-on-macos/2026-10-20T17:16:41+00:00https://nhimg.org/faq/how-do-you-detect-suspicious-netcat-execution-on-windows/2026-10-20T17:16:43+00:00https://nhimg.org/faq/how-do-you-detect-syslog-and-log-clearing-on-linux/2026-10-20T17:16:45+00:00https://nhimg.org/faq/how-do-you-detect-system-integrity-protection-being-disabled-on-macos/2026-10-20T17:16:48+00:00https://nhimg.org/faq/how-do-you-detect-system-logs-being-cleared-on-macos/2026-10-20T17:16:50+00:00https://nhimg.org/faq/how-do-you-detect-the-root-account-being-enabled-on-macos/2026-10-20T17:16:52+00:00https://nhimg.org/faq/how-do-you-detect-the-triplecross-ebpf-rootkit-on-linux/2026-10-20T17:16:58+00:00https://nhimg.org/faq/how-do-you-detect-the-system-firewall-being-disabled-or-modified-on-linux/2026-10-20T17:17:05+00:00https://nhimg.org/faq/how-do-you-detect-theft-of-windows-dpapi-master-keys-and-domain-backup-keys/2026-10-20T17:17:08+00:00https://nhimg.org/faq/how-do-you-detect-timestomping-of-file-time-attributes-on-linux/2026-10-20T17:17:10+00:00https://nhimg.org/faq/how-do-you-detect-timestomping-of-file-timestamps-on-windows/2026-10-20T17:17:12+00:00https://nhimg.org/faq/how-do-you-detect-uac-bypass-attempts-on-windows/2026-10-20T17:17:14+00:00https://nhimg.org/faq/how-do-you-detect-unauthorised-local-user-account-creation-on-windows/2026-10-20T17:17:17+00:00https://nhimg.org/faq/you-detect-unauthorised-remote-access-software-such-ultravnc-windows/2026-10-20T17:17:20+00:00https://nhimg.org/faq/you-detect-unauthorised-remote-access-tools-like-anydesk-windows-endpoints/2026-10-20T17:17:27+00:00https://nhimg.org/faq/how-do-you-detect-unquoted-service-path-privilege-escalation-on-windows/2026-10-20T17:17:33+00:00https://nhimg.org/faq/how-do-you-detect-user-account-control-being-disabled-on-windows/2026-10-20T17:17:39+00:00https://nhimg.org/faq/how-do-you-detect-virtual-machines-being-killed-via-esxcli-on-esxi/2026-10-20T17:17:46+00:00https://nhimg.org/faq/how-do-you-detect-users-added-to-the-admin-group-on-macos/2026-10-20T17:17:48+00:00https://nhimg.org/faq/how-do-you-detect-volume-shadow-copy-abuse-for-credential-theft-on-windows/2026-10-20T17:17:51+00:00https://nhimg.org/faq/how-do-you-detect-visual-studio-code-tunnels-abused-for-remote-access-on-windows/2026-10-20T17:17:55+00:00https://nhimg.org/faq/how-do-you-detect-usb-device-connections-on-windows/2026-10-20T17:17:57+00:00https://nhimg.org/faq/how-do-you-detect-vulnerable-driver-loads-used-in-byovd-attacks-on-windows/2026-10-20T17:18:00+00:00https://nhimg.org/faq/you-detect-wdigest-being-re-enabled-expose-plaintext-credentials-windows/2026-10-20T17:18:03+00:00https://nhimg.org/faq/how-do-you-detect-wi-fi-password-harvesting-with-netsh-on-windows/2026-10-20T17:18:07+00:00https://nhimg.org/faq/how-do-you-detect-windows-credential-manager-access-with-vaultcmd/2026-10-20T17:18:18+00:00https://nhimg.org/faq/how-do-you-detect-windows-audit-policy-tampering-with-auditpol/2026-10-20T17:18:21+00:00https://nhimg.org/faq/how-do-you-detect-windows-event-log-clearing/2026-10-20T17:18:22+00:00https://nhimg.org/faq/how-do-you-detect-windows-firewall-being-disabled-or-reset/2026-10-20T17:18:28+00:00https://nhimg.org/faq/how-do-you-detect-windows-services-hidden-through-security-descriptor-tampering/2026-10-20T17:18:30+00:00https://nhimg.org/faq/how-do-you-detect-winlogon-helper-dll-persistence-on-windows/2026-10-20T17:18:33+00:00https://nhimg.org/faq/how-do-you-detect-windows-subsystem-for-linux-abuse/2026-10-20T17:18:34+00:00https://nhimg.org/faq/how-do-you-detect-wmi-event-subscription-persistence-on-windows/2026-10-20T17:18:36+00:00https://nhimg.org/faq/how-do-you-monitor-powershell-execution-on-windows/2026-10-20T17:18:41+00:00https://nhimg.org/faq/you-triage-antivirus-alerts-hacktools-password-dumpers-ransomware-web-shells/2026-10-20T17:18:50+00:00https://nhimg.org/faq/how-do-you-monitor-windows-code-integrity-events-for-blocked-or-unsigned-drivers/2026-10-20T17:18:54+00:00https://nhimg.org/faq/how-do-you-configure-a-strong-ram-password-policy-in-alibaba-cloud/2026-10-20T17:18:55+00:00https://nhimg.org/faq/lsa-protection-runasppl-enabled-windows-you-detect-tampering/2026-10-20T17:18:56+00:00https://nhimg.org/faq/how-do-you-block-rdp-and-ssh-from-the-internet-in-azure-network-security-groups/2026-10-20T17:19:01+00:00https://nhimg.org/faq/how-do-you-configure-azure-firewall-threat-intelligence-and-idps-in-deny-mode/2026-10-20T17:19:03+00:00https://nhimg.org/faq/how-do-you-configure-network-policies-in-azure-kubernetes-service/2026-10-20T17:19:06+00:00https://nhimg.org/faq/how-do-you-configure-rate-limiting-in-cloudflare-to-protect-against-abuse/2026-10-20T17:19:09+00:00https://nhimg.org/faq/how-do-you-configure-ssltls-full-strict-mode-in-cloudflare/2026-10-20T17:19:17+00:00https://nhimg.org/faq/how-do-you-configure-tls-inspection-in-microsoft-global-secure-access/2026-10-20T17:19:21+00:00https://nhimg.org/faq/how-do-you-detect-azure-network-security-group-changes/2026-10-20T17:19:26+00:00https://nhimg.org/faq/how-do-you-detect-azure-firewall-rules-or-policies-being-modified-or-deleted/2026-10-20T17:19:29+00:00https://nhimg.org/faq/how-do-you-detect-cleartext-protocol-usage-on-your-network/2026-10-20T17:19:32+00:00https://nhimg.org/faq/how-do-you-detect-crypto-mining-pool-lookups-on-your-network/2026-10-20T17:19:34+00:00https://nhimg.org/faq/you-detect-dns-queries-out-band-interaction-domains-such-interactsh/2026-10-20T17:19:35+00:00https://nhimg.org/faq/how-do-you-detect-cryptomining-through-dns-queries-to-mining-pools/2026-10-20T17:19:37+00:00https://nhimg.org/faq/how-do-you-detect-dns-tunnelling-and-exfiltration-tools-on-windows/2026-10-20T17:19:44+00:00https://nhimg.org/faq/how-do-you-detect-dns-tunnelling-using-base64-encoded-queries/2026-10-20T17:19:47+00:00https://nhimg.org/faq/how-do-you-detect-full-network-packet-capture-being-enabled-in-google-cloud/2026-10-20T17:19:55+00:00https://nhimg.org/faq/you-detect-downloads-suspicious-dynamic-dns-hosts-top-level-domains/2026-10-20T17:19:57+00:00https://nhimg.org/faq/how-do-you-detect-google-cloud-firewall-rules-being-modified-or-deleted/2026-10-20T17:20:00+00:00https://nhimg.org/faq/how-do-you-detect-internal-port-scanning-activity/2026-10-20T17:20:02+00:00https://nhimg.org/faq/how-do-you-detect-logs-being-cleared-or-disabled-on-cisco-devices/2026-10-20T17:20:05+00:00https://nhimg.org/faq/how-do-you-detect-netsh-port-forwarding-used-for-pivoting-on-windows/2026-10-20T17:20:09+00:00https://nhimg.org/faq/you-detect-network-scanning-tools-such-nmap-running-windows-endpoints/2026-10-20T17:20:11+00:00https://nhimg.org/faq/how-do-you-detect-network-sniffing-tools-on-windows-hosts/2026-10-20T17:20:15+00:00https://nhimg.org/faq/how-do-you-detect-rdp-tunnelling-through-ssh-or-plink-on-windows/2026-10-20T17:20:22+00:00https://nhimg.org/faq/you-detect-route-53-domain-transfer-lock-being-disabled-domains-transferred/2026-10-20T17:20:25+00:00https://nhimg.org/faq/you-detect-reverse-proxy-tunnelling-tools-such-frp-ngrok-windows/2026-10-20T17:20:30+00:00https://nhimg.org/faq/how-do-you-detect-suspicious-network-communication-with-ipfs/2026-10-20T17:20:32+00:00https://nhimg.org/faq/how-do-you-detect-security-group-ingress-and-egress-changes-in-aws/2026-10-20T17:20:35+00:00https://nhimg.org/faq/how-do-you-detect-suspicious-or-malicious-user-agents-in-proxy-logs/2026-10-20T17:20:38+00:00https://nhimg.org/faq/how-do-you-detect-tor-proxy-use-through-dns-traffic/2026-10-20T17:20:40+00:00https://nhimg.org/faq/how-do-you-detect-tor-usage-on-corporate-windows-endpoints/2026-10-20T17:20:42+00:00https://nhimg.org/faq/how-do-you-detect-tunnelling-services-such-as-ngrok-on-linux/2026-10-20T17:20:46+00:00https://nhimg.org/faq/you-detect-unauthorised-cloudflare-tunnel-cloudflared-use-corporate-endpoints/2026-10-20T17:20:50+00:00https://nhimg.org/faq/you-disable-public-network-access-azure-paas-services-such-service-bus-databases/2026-10-20T17:20:56+00:00https://nhimg.org/faq/how-do-you-enable-azure-network-security-group-flow-logs/2026-10-20T17:21:00+00:00https://nhimg.org/faq/how-do-you-enable-dnssec-for-google-cloud-dns-managed-zones/2026-10-20T17:21:01+00:00https://nhimg.org/faq/how-do-you-enable-dnssec-in-cloudflare/2026-10-20T17:21:07+00:00https://nhimg.org/faq/how-do-you-enable-transfer-lock-on-amazon-route-53-domains-to-prevent-hijacking/2026-10-20T17:21:07+00:00https://nhimg.org/faq/how-do-you-enable-vpc-flow-logs-in-aws/2026-10-20T17:21:11+00:00https://nhimg.org/faq/how-do-you-enforce-a-minimum-tls-version-of-12-across-azure-services/2026-10-20T17:21:14+00:00https://nhimg.org/faq/how-do-you-enable-vpc-flow-logs-in-alibaba-cloud/2026-10-20T17:21:16+00:00https://nhimg.org/faq/how-do-you-enforce-https-and-modern-tls-on-amazon-cloudfront-distributions/2026-10-20T17:21:21+00:00https://nhimg.org/faq/how-do-you-enforce-https-and-tls-12-between-viewers-and-amazon-cloudfront/2026-10-20T17:21:23+00:00https://nhimg.org/faq/how-do-you-enforce-https-on-an-aws-application-load-balancer/2026-10-20T17:21:25+00:00https://nhimg.org/faq/how-do-you-enforce-https-only-access-for-azure-function-apps-and-web-apps/2026-10-20T17:21:29+00:00https://nhimg.org/faq/how-do-you-enforce-tls-12-or-higher-on-aws-load-balancer-listeners/2026-10-20T17:21:32+00:00https://nhimg.org/faq/how-do-you-enforce-kubernetes-network-policies-in-gke/2026-10-20T17:21:35+00:00https://nhimg.org/faq/how-do-you-find-dangling-dns-records-that-risk-subdomain-takeover-in-cloudflare/2026-10-20T17:21:39+00:00https://nhimg.org/faq/how-do-you-enforce-kubernetes-network-policies-in-amazon-eks/2026-10-20T17:21:41+00:00https://nhimg.org/faq/you-prevent-aws-network-acls-allowing-unrestricted-inbound-access-internet/2026-10-20T17:21:46+00:00https://nhimg.org/faq/you-prevent-aws-security-groups-allowing-unrestricted-inbound-access-00000/2026-10-20T17:21:49+00:00https://nhimg.org/faq/you-prevent-subdomain-takeover-dangling-dns-records-cloudfront-origins-aws/2026-10-20T17:21:52+00:00https://nhimg.org/faq/how-do-you-prevent-weak-cipher-suites-in-google-cloud-load-balancer-ssl-policies/2026-10-20T17:21:56+00:00https://nhimg.org/faq/how-do-you-restrict-azure-sql-server-firewall-rules-to-prevent-public-access/2026-10-20T17:22:01+00:00https://nhimg.org/faq/how-do-you-restrict-mongodb-atlas-api-access-with-an-ip-access-list/2026-10-20T17:22:05+00:00https://nhimg.org/faq/you-restrict-internet-access-database-admin-ports-aws-security-groups/2026-10-20T17:22:08+00:00https://nhimg.org/faq/you-restrict-mongodb-atlas-network-access-lists-so-clusters-not-open-internet/2026-10-20T17:22:14+00:00https://nhimg.org/faq/you-restrict-ssh-rdp-access-internet-alibaba-cloud-security-groups/2026-10-20T17:22:18+00:00https://nhimg.org/faq/how-do-you-set-the-default-network-access-rule-to-deny-on-azure-storage-accounts/2026-10-20T17:22:24+00:00https://nhimg.org/faq/how-do-you-restrict-ssh-and-rdp-from-the-internet-in-google-cloud-firewall-rules/2026-10-20T17:22:26+00:00https://nhimg.org/faq/how-do-you-restrict-network-access-to-azure-storage-accounts/2026-10-20T17:22:30+00:00https://nhimg.org/faq/how-do-you-set-the-minimum-tls-version-in-cloudflare/2026-10-20T17:22:34+00:00https://nhimg.org/faq/you-stop-azure-network-security-groups-exposing-rdp-ssh-http-internet/2026-10-20T17:22:43+00:00https://nhimg.org/faq/how-do-you-stop-openstack-security-groups-allowing-ssh-and-rdp-from-the-internet/2026-10-20T17:22:45+00:00https://nhimg.org/faq/you-stop-google-cloud-firewall-rules-allowing-unrestricted-ssh-rdp-other-ports/2026-10-20T17:22:48+00:00https://nhimg.org/faq/why-is-a-publicly-accessible-rdp-service-risky-and-how-do-you-detect-it/2026-10-20T17:22:53+00:00https://nhimg.org/faq/palo-alto-networks-security-rules-avoid-any-applications-services-addresses/2026-10-20T17:22:55+00:00https://nhimg.org/faq/http-telnet-management-disabled-palo-alto-networks-firewall-interfaces/2026-10-20T17:22:56+00:00https://nhimg.org/faq/why-should-the-default-vpc-security-group-restrict-all-traffic-in-aws/2026-10-20T17:23:00+00:00https://nhimg.org/faq/why-should-ip-forwarding-be-disabled-on-google-cloud-and-azure-virtual-machines/2026-10-20T17:23:05+00:00https://nhimg.org/faq/why-should-tls-10-and-tls-11-be-disabled-on-windows-systems/2026-10-20T17:23:06+00:00https://nhimg.org/faq/how-do-you-detect-doas-configuration-changes-and-abuse-on-linux/2026-10-20T17:23:09+00:00https://nhimg.org/faq/how-do-you-detect-users-added-to-the-root-or-sudo-group-on-linux/2026-10-20T17:23:13+00:00https://nhimg.org/faq/you-configure-post-quantum-tls-policies-aws-load-balancers-cloudfront-api/2026-10-20T17:23:16+00:00https://nhimg.org/faq/how-do-you-encrypt-and-log-aws-systems-manager-session-manager-sessions/2026-10-20T17:23:20+00:00https://nhimg.org/faq/how-do-you-detect-rogue-root-certificates-being-installed-on-windows/2026-10-20T17:23:22+00:00https://nhimg.org/faq/how-do-you-enable-kubelet-certificate-rotation-in-kubernetes/2026-10-20T17:23:27+00:00https://nhimg.org/faq/you-secure-etcd-tls-client-certificate-authentication-kubernetes/2026-10-20T17:23:30+00:00https://nhimg.org/faq/how-do-you-secure-tls-between-the-kubernetes-api-server-etcd-and-kubelets/2026-10-20T17:23:33+00:00https://nhimg.org/faq/how-do-you-make-a-mobile-app-comply-with-privacy-regulations-and-best-practices/2026-10-20T17:23:35+00:00https://nhimg.org/faq/how-do-you-detect-credential-theft-from-veeam-backup-servers/2026-10-20T17:23:42+00:00https://nhimg.org/faq/how-do-you-detect-ransomware-activity-in-microsoft-365/2026-10-20T17:23:46+00:00https://nhimg.org/faq/how-do-you-detect-ransomware-deleting-windows-backups-and-volume-shadow-copies/2026-10-20T17:23:48+00:00https://nhimg.org/faq/how-do-you-detect-time-machine-backups-being-deleted-or-disabled-on-macos/2026-10-20T17:23:53+00:00https://nhimg.org/faq/how-do-you-enable-point-in-time-recovery-for-amazon-dynamodb-tables/2026-10-20T17:23:55+00:00https://nhimg.org/faq/how-do-you-detect-s3-bucket-versioning-being-disabled-in-aws/2026-10-20T17:23:59+00:00https://nhimg.org/faq/how-do-you-enable-s3-object-lock-by-default-on-amazon-s3-buckets/2026-10-20T17:24:01+00:00https://nhimg.org/faq/how-do-you-set-up-aws-backup-plans-and-vaults-to-protect-data/2026-10-20T17:24:03+00:00https://nhimg.org/faq/how-do-you-use-s3-object-lock-to-protect-backups-against-ransomware/2026-10-20T17:24:07+00:00https://nhimg.org/faq/why-should-versioning-be-enabled-on-amazon-s3-buckets/2026-10-20T17:24:09+00:00https://nhimg.org/faq/how-do-you-detect-cobalt-strike-beacons-and-named-pipes-on-windows/2026-10-20T17:24:13+00:00https://nhimg.org/faq/how-do-you-detect-cobalt-strike-command-and-control-traffic/2026-10-20T17:24:16+00:00https://nhimg.org/faq/how-do-you-detect-cobalt-strike-dns-beaconing/2026-10-20T17:24:20+00:00https://nhimg.org/faq/how-do-you-detect-cobalt-strike-servers-using-default-tls-certificates/2026-10-20T17:24:22+00:00https://nhimg.org/faq/how-do-you-detect-impacket-smbexec-lateral-movement-on-windows/2026-10-20T17:24:26+00:00https://nhimg.org/faq/how-do-you-detect-lateral-movement-through-windows-admin-shares/2026-10-20T17:24:30+00:00https://nhimg.org/faq/how-do-you-detect-impacket-tools-being-used-for-lateral-movement-on-windows/2026-10-20T17:24:33+00:00https://nhimg.org/faq/how-do-you-detect-lateral-movement-via-remote-dcom-and-wmi-on-windows-networks/2026-10-20T17:24:35+00:00https://nhimg.org/faq/how-do-you-detect-malware-using-the-telegram-api-for-command-and-control/2026-10-20T17:24:39+00:00https://nhimg.org/faq/how-do-you-detect-print-spooler-rpc-abuse-for-lateral-movement-on-windows/2026-10-20T17:24:43+00:00https://nhimg.org/faq/how-do-you-detect-psexec-and-similar-remote-service-execution-tools-on-windows/2026-10-20T17:24:47+00:00https://nhimg.org/faq/how-do-you-detect-rdp-lateral-movement-on-windows/2026-10-20T17:24:51+00:00https://nhimg.org/faq/how-do-you-detect-remote-command-execution-through-wmi-on-windows/2026-10-20T17:24:57+00:00https://nhimg.org/faq/how-do-you-detect-remote-powershell-sessions-over-winrm/2026-10-20T17:25:02+00:00https://nhimg.org/faq/how-do-you-detect-remote-registry-abuse-for-lateral-movement-on-windows/2026-10-20T17:25:05+00:00https://nhimg.org/faq/how-do-you-detect-remote-registry-abuse-on-windows/2026-10-20T17:25:09+00:00https://nhimg.org/faq/how-do-you-detect-remote-scheduled-task-creation-for-lateral-movement/2026-10-20T17:25:12+00:00https://nhimg.org/faq/you-detect-remote-service-task-creation-lateral-movement-windows/2026-10-20T17:25:16+00:00https://nhimg.org/faq/how-do-you-detect-sliver-c2-implants-on-windows-endpoints/2026-10-20T17:25:19+00:00https://nhimg.org/faq/how-do-you-detect-suspicious-access-to-the-admin-network-share-on-windows/2026-10-20T17:25:23+00:00https://nhimg.org/faq/how-do-you-detect-windows-event-logs-being-cleared-with-wevtutil/2026-10-20T17:25:29+00:00https://nhimg.org/faq/how-do-you-enable-audit-log-search-in-microsoft-purview/2026-10-20T17:25:33+00:00https://nhimg.org/faq/how-do-you-set-up-azure-activity-log-alerts-for-security-relevant-changes/2026-10-20T17:25:36+00:00https://nhimg.org/faq/you-set-up-cloudwatch-metric-filters-alarms-cis-security-events-aws/2026-10-20T17:25:39+00:00https://nhimg.org/faq/you-set-up-log-metric-filters-alerts-security-changes-google-cloud/2026-10-20T17:25:42+00:00https://nhimg.org/faq/you-set-up-oci-event-rules-alert-iam-network-configuration-changes/2026-10-20T17:25:48+00:00https://nhimg.org/faq/how-do-you-stream-okta-system-logs-to-a-siem/2026-10-20T17:25:49+00:00https://nhimg.org/faq/how-do-you-set-up-security-alert-rules-in-google-workspace/2026-10-20T17:25:51+00:00https://nhimg.org/faq/you-use-opencanary-honeypot-alerts-detect-attackers-moving-inside-network/2026-10-20T17:25:54+00:00https://nhimg.org/faq/access-raw-paste-services-like-pastebin-indicate-you-detect-it/2026-10-20T17:25:59+00:00https://nhimg.org/faq/how-do-you-configure-encryption-at-rest-for-kubernetes-secrets-in-etcd/2026-10-20T17:26:02+00:00https://nhimg.org/faq/how-do-you-configure-key-rotation-for-oracle-cloud-vault-keys/2026-10-20T17:26:05+00:00https://nhimg.org/faq/how-do-you-enable-envelope-encryption-of-kubernetes-secrets-in-amazon-eks/2026-10-20T17:26:09+00:00https://nhimg.org/faq/how-do-you-encrypt-aws-lambda-environment-variables-with-kms/2026-10-20T17:26:15+00:00https://nhimg.org/faq/how-do-you-enable-soft-delete-and-purge-protection-for-azure-key-vault/2026-10-20T17:26:20+00:00https://nhimg.org/faq/how-do-you-enable-dependabot-alerts-in-github-repositories/2026-10-20T17:26:21+00:00https://nhimg.org/faq/how-do-you-restrict-network-access-to-azure-key-vault-with-firewall-rules/2026-10-20T17:26:24+00:00https://nhimg.org/faq/how-do-you-enforce-binary-authorization-for-gke-deployments/2026-10-20T17:26:28+00:00https://nhimg.org/faq/how-do-you-enforce-code-signing-for-aws-lambda-functions/2026-10-20T17:26:32+00:00https://nhimg.org/faq/how-do-you-prevent-dependency-confusion-attacks-in-aws-codeartifact/2026-10-20T17:26:34+00:00https://nhimg.org/faq/how-do-you-prevent-public-access-to-google-artifact-registry-repositories/2026-10-20T17:26:40+00:00https://nhimg.org/faq/how-do-you-require-signed-commits-in-github-and-gitlab/2026-10-20T17:26:45+00:00https://nhimg.org/faq/how-do-you-sign-container-images-and-attest-sboms-with-cosign-in-ci-pipelines/2026-10-20T17:26:51+00:00https://nhimg.org/faq/why-should-circleci-pipelines-avoid-mutable-or-unversioned-orbs/2026-10-20T17:26:53+00:00https://nhimg.org/faq/why-should-kubernetes-container-images-be-referenced-by-digest-rather-than-tag/2026-10-20T17:26:56+00:00https://nhimg.org/faq/why-should-terraform-module-sources-be-pinned-to-a-commit-hash-or-version-tag/2026-10-20T17:26:57+00:00https://nhimg.org/faq/how-do-you-detect-f5-big-ip-icontrol-rest-api-command-execution-exploitation/2026-10-20T17:27:02+00:00https://nhimg.org/faq/how-do-you-detect-log4shell-and-jndi-exploitation-attempts-in-web-logs/2026-10-20T17:27:05+00:00https://nhimg.org/faq/how-do-you-detect-omigod-exploitation-of-omi-on-linux/2026-10-20T17:27:08+00:00https://nhimg.org/faq/how-do-you-detect-proxylogon-exploitation-on-microsoft-exchange-servers/2026-10-20T17:27:11+00:00https://nhimg.org/faq/how-do-you-detect-shellshock-exploitation-attempts-on-linux/2026-10-20T17:27:15+00:00https://nhimg.org/faq/how-do-you-enable-amazon-inspector-scanning-for-ec2-ecr-and-lambda/2026-10-20T17:27:18+00:00https://nhimg.org/faq/how-do-you-prioritise-cisa-known-exploited-vulnerabilities-in-amazon-inspector/2026-10-20T17:27:23+00:00https://nhimg.org/faq/how-does-a-vector-database-compromise-attack-work/2026-10-20T17:27:25+00:00https://nhimg.org/faq/security-risks-assigning-azure-cognitive-services-contributor-role/2026-10-20T17:27:27+00:00https://nhimg.org/faq/used-instead-azure-cognitive-services-user-role-least-privilege/2026-10-20T17:27:31+00:00https://nhimg.org/faq/what-permissions-does-the-azure-ai-foundry-owner-role-grant/2026-10-20T17:27:33+00:00https://nhimg.org/faq/what-risks-does-ai-provenance-reduce/2026-10-20T17:27:39+00:00https://nhimg.org/faq/what-controls-reduce-the-risk-of-malicious-model-deserialisation/2026-10-20T17:27:44+00:00https://nhimg.org/faq/how-do-attackers-use-tokenbreak-attack-against-ai-systems/2026-10-20T17:27:46+00:00https://nhimg.org/faq/when-should-security-teams-use-prompt-scanning/2026-10-20T17:27:51+00:00https://nhimg.org/faq/how-can-defenders-detect-malicious-use-of-browser-exploitation-framework-beef/2026-10-20T17:27:54+00:00https://nhimg.org/faq/how-can-security-teams-detect-web-application-firewall-waf-bypass/2026-10-20T17:27:57+00:00https://nhimg.org/faq/how-do-attackers-use-dom-based-cross-site-scripting/2026-10-20T17:27:59+00:00https://nhimg.org/faq/how-do-attackers-use-stored-cross-site-scripting/2026-10-20T17:28:02+00:00https://nhimg.org/faq/how-do-organisations-get-started-with-session-identifier/2026-10-20T17:28:07+00:00https://nhimg.org/faq/how-do-developers-prevent-broken-object-property-level-authorisation-bopla/2026-10-20T17:28:09+00:00https://nhimg.org/faq/how-do-testers-find-jinja2-server-side-template-injection-ssti/2026-10-20T17:28:13+00:00https://nhimg.org/faq/how-does-app-signing-mobile-work/2026-10-20T17:28:16+00:00https://nhimg.org/faq/how-does-stride-threat-modelling-work/2026-10-20T17:28:20+00:00https://nhimg.org/faq/is-google-play-integrity-api-free-to-use/2026-10-20T17:28:22+00:00https://nhimg.org/faq/what-causes-client-side-prototype-pollution/2026-10-20T17:28:27+00:00https://nhimg.org/faq/what-causes-insecure-json-web-tokens-jwt/2026-10-20T17:28:34+00:00https://nhimg.org/faq/what-causes-dom-clobbering/2026-10-20T17:28:35+00:00https://nhimg.org/faq/what-causes-java-deserialisation/2026-10-20T17:28:36+00:00https://nhimg.org/faq/what-causes-unrestricted-access-to-sensitive-business-flows/2026-10-20T17:28:40+00:00https://nhimg.org/faq/what-causes-unsafe-consumption-of-apis/2026-10-20T17:28:41+00:00https://nhimg.org/faq/what-does-account-enumeration-look-like-in-a-real-intrusion/2026-10-20T17:28:42+00:00https://nhimg.org/faq/what-does-ssl-pinning-bypass-look-like-in-a-real-intrusion/2026-10-20T17:28:47+00:00https://nhimg.org/faq/what-does-yaml-deserialisation-attack-look-like-in-a-real-intrusion/2026-10-20T17:28:53+00:00https://nhimg.org/faq/what-is-an-example-of-net-deserialisation-in-real-code/2026-10-20T17:28:59+00:00https://nhimg.org/faq/what-is-an-example-of-aspnet-viewstate-deserialisation-in-real-code/2026-10-20T17:29:01+00:00https://nhimg.org/faq/which-systems-are-most-exposed-to-login-bypass/2026-10-20T17:29:03+00:00https://nhimg.org/faq/what-is-an-example-of-reference-token-in-practice/2026-10-20T17:29:08+00:00https://nhimg.org/faq/which-logs-show-evidence-of-stack-smashing/2026-10-20T17:29:13+00:00https://nhimg.org/faq/why-does-self-contained-token-matter-for-security-teams/2026-10-20T17:29:13+00:00https://nhimg.org/faq/when-should-security-teams-use-source-code-review/2026-10-20T17:29:18+00:00https://nhimg.org/faq/why-does-web-application-testing-matter-for-security-teams/2026-10-20T17:29:21+00:00https://nhimg.org/faq/you-audit-who-holds-azure-virtual-machine-data-access-administrator-role/2026-10-20T17:29:35+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-google-cloud-iam-deny-admin-role/2026-10-20T17:29:37+00:00https://nhimg.org/faq/security-risks-assigning-azure-kubernetes-service-rbac-reader-role/2026-10-20T17:29:40+00:00https://nhimg.org/faq/security-risks-assigning-azure-kubernetes-service-rbac-writer-role/2026-10-20T17:29:44+00:00https://nhimg.org/faq/what-mitigations-reduce-the-risk-of-biometric-authentication-bypass/2026-10-20T17:29:53+00:00https://nhimg.org/faq/how-do-defenders-use-cloudsplaining/2026-10-20T17:29:53+00:00https://nhimg.org/faq/how-do-defenders-use-policy-sentry/2026-10-20T17:29:54+00:00https://nhimg.org/faq/security-risks-assigning-google-cloud-principal-access-boundary-admin-role/2026-10-20T17:30:02+00:00https://nhimg.org/faq/how-do-organisations-get-started-with-distroless-container-images/2026-10-20T17:30:13+00:00https://nhimg.org/faq/how-do-soc-teams-collect-cloud-audit-trail-telemetry/2026-10-20T17:30:18+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-aws-amazoneksservicepolicy-managed-policy/2026-10-20T17:30:19+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-google-cloud-compute-instance-admin-v1-role/2026-10-20T17:30:22+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-google-cloud-run-developer-role/2026-10-20T17:30:26+00:00https://nhimg.org/faq/what-are-common-mistakes-with-cloud-control-plane-security/2026-10-20T17:30:30+00:00https://nhimg.org/faq/what-are-the-common-vulnerabilities-in-docker-remote-api/2026-10-20T17:30:35+00:00https://nhimg.org/faq/security-risks-assigning-azure-log-analytics-contributor-role/2026-10-20T17:30:42+00:00https://nhimg.org/faq/what-are-the-security-risks-of-assigning-the-azure-monitoring-contributor-role/2026-10-20T17:30:44+00:00https://nhimg.org/faq/what-are-the-security-risks-of-assigning-the-google-cloud-folder-admin-role/2026-10-20T17:30:45+00:00https://nhimg.org/faq/what-are-the-security-risks-of-assigning-the-google-cloud-functions-invoker-role/2026-10-20T17:30:50+00:00https://nhimg.org/faq/security-risks-assigning-google-cloud-private-logs-viewer-role/2026-10-20T17:30:54+00:00https://nhimg.org/faq/how-do-you-audit-who-holds-the-google-cloud-functions-developer-role/2026-10-20T17:30:54+00:00https://nhimg.org/faq/what-are-the-security-risks-of-assigning-the-google-cloud-logs-writer-role/2026-10-20T17:31:01+00:00https://nhimg.org/faq/what-are-the-security-risks-of-assigning-the-google-cloud-project-creator-role/2026-10-20T17:31:04+00:00https://nhimg.org/faq/what-are-the-security-risks-of-assigning-the-google-cloud-run-invoker-role/2026-10-20T17:31:05+00:00https://nhimg.org/faq/what-is-amazon-guardduty-used-for-in-security-testing/2026-10-20T17:31:08+00:00https://nhimg.org/faq/what-is-pmapper-used-for-in-security-testing/2026-10-20T17:31:09+00:00https://nhimg.org/faq/what-permissions-does-the-aws-billing-managed-policy-grant/2026-10-20T17:31:12+00:00https://nhimg.org/faq/what-permissions-does-the-azure-management-group-contributor-role-grant/2026-10-20T17:31:16+00:00https://nhimg.org/faq/what-permissions-does-the-azure-api-management-service-contributor-role-grant/2026-10-20T17:31:22+00:00https://nhimg.org/faq/what-permissions-does-the-azure-monitoring-reader-role-grant/2026-10-20T17:31:26+00:00https://nhimg.org/faq/what-permissions-does-the-google-cloud-compute-security-admin-role-grant/2026-10-20T17:31:30+00:00https://nhimg.org/faq/what-permissions-does-the-google-kubernetes-engine-cluster-admin-role-grant/2026-10-20T17:31:33+00:00https://nhimg.org/faq/what-risks-does-cloud-tenant-isolation-reduce/2026-10-20T17:31:36+00:00https://nhimg.org/faq/used-instead-azure-kubernetes-service-contributor-role-least-privilege/2026-10-20T17:31:39+00:00https://nhimg.org/faq/used-instead-azure-reader-data-access-role-least-privilege/2026-10-20T17:31:46+00:00https://nhimg.org/faq/used-instead-azure-kubernetes-service-cluster-user-role-least-privilege/2026-10-20T17:31:49+00:00https://nhimg.org/faq/used-instead-azure-log-analytics-reader-role-least-privilege/2026-10-20T17:31:54+00:00https://nhimg.org/faq/used-instead-google-cloud-functions-admin-role-least-privilege/2026-10-20T17:31:58+00:00https://nhimg.org/faq/used-instead-google-cloud-logging-admin-role-least-privilege/2026-10-20T17:32:03+00:00https://nhimg.org/faq/used-instead-google-cloud-run-admin-role-least-privilege/2026-10-20T17:32:08+00:00https://nhimg.org/faq/used-instead-google-cloud-security-command-center-admin-role-least-privilege/2026-10-20T17:32:11+00:00https://nhimg.org/faq/used-instead-google-kubernetes-engine-developer-role-least-privilege/2026-10-20T17:32:20+00:00https://nhimg.org/faq/how-do-organisations-get-started-with-sensitive-data/2026-10-20T17:32:24+00:00https://nhimg.org/faq/security-risks-assigning-azure-documentdb-account-contributor-role/2026-10-20T17:32:29+00:00https://nhimg.org/faq/what-are-the-security-risks-of-assigning-the-azure-sql-server-contributor-role/2026-10-20T17:32:34+00:00https://nhimg.org/faq/what-are-the-security-risks-of-assigning-the-azure-sql-db-contributor-role/2026-10-20T17:32:37+00:00https://nhimg.org/faq/what-are-the-security-risks-of-assigning-the-azure-storage-blob-delegator-role/2026-10-20T17:32:40+00:00https://nhimg.org/faq/security-risks-assigning-azure-storage-file-data-privileged-reader-role/2026-10-20T17:32:44+00:00https://nhimg.org/faq/security-risks-assigning-azure-storage-file-data-smb-share-reader-role/2026-10-20T17:32:49+00:00https://nhimg.org/faq/what-are-the-security-risks-of-assigning-the-google-cloud-bigquery-admin-role/2026-10-20T17:32:52+00:00https://nhimg.org/faq/what-are-the-security-risks-of-assigning-the-google-cloud-sql-admin-role/2026-10-20T17:32:56+00:00https://nhimg.org/faq/security-risks-assigning-google-cloud-storage-object-user-role/2026-10-20T17:33:00+00:00https://nhimg.org/faq/what-permissions-does-the-azure-sql-security-manager-role-grant/2026-10-20T17:33:04+00:00https://nhimg.org/faq/permissions-azure-storage-file-data-privileged-contributor-role-grant/2026-10-20T17:33:07+00:00https://nhimg.org/faq/permissions-azure-storage-file-data-smb-share-contributor-role-grant/2026-10-20T17:33:12+00:00https://nhimg.org/faq/permissions-azure-storage-file-data-smb-share-elevated-contributor-role-grant/2026-10-20T17:33:16+00:00https://nhimg.org/faq/what-permissions-does-the-google-cloud-sql-client-role-grant/2026-10-20T17:33:21+00:00https://nhimg.org/faq/what-permissions-does-the-google-cloud-bigquery-data-editor-role-grant/2026-10-20T17:33:23+00:00https://nhimg.org/faq/what-permissions-does-the-google-cloud-sql-instance-user-role-grant/2026-10-20T17:33:28+00:00https://nhimg.org/faq/used-instead-google-cloud-bigquery-data-viewer-role-least-privilege/2026-10-20T17:33:32+00:00https://nhimg.org/faq/used-instead-google-cloud-storage-object-creator-role-least-privilege/2026-10-20T17:33:38+00:00https://nhimg.org/faq/why-does-aes-128-cbc-matter-for-security-teams/2026-10-20T17:33:41+00:00https://nhimg.org/faq/why-does-data-at-rest-and-data-in-transit-matter-for-security-teams/2026-10-20T17:33:45+00:00https://nhimg.org/faq/how-can-security-teams-detect-exchange-pushsubscription-abuse-privexchange/2026-10-20T17:33:49+00:00https://nhimg.org/faq/how-can-security-teams-detect-s4u2self-abuse/2026-10-20T17:33:52+00:00https://nhimg.org/faq/how-do-attackers-use-as-req-roasting/2026-10-20T17:33:53+00:00https://nhimg.org/faq/how-do-attackers-use-directory-services-restore-mode-account-abuse/2026-10-20T17:33:57+00:00https://nhimg.org/faq/how-do-attackers-use-dsrm-persistence/2026-10-20T17:34:00+00:00https://nhimg.org/faq/what-are-the-security-risks-of-machineaccountquota/2026-10-20T17:34:06+00:00https://nhimg.org/faq/how-do-testers-find-pre-windows-2000-computer-accounts/2026-10-20T17:34:07+00:00https://nhimg.org/faq/what-does-ntds-secrets-look-like-in-a-real-intrusion/2026-10-20T17:34:09+00:00https://nhimg.org/faq/what-is-an-example-of-the-ms14-068-kerberos-vulnerability-in-real-code/2026-10-20T17:34:14+00:00https://nhimg.org/faq/what-mitigations-reduce-the-risk-of-adidns-poisoning/2026-10-20T17:34:15+00:00https://nhimg.org/faq/what-risks-do-access-control-lists-reduce/2026-10-20T17:34:19+00:00https://nhimg.org/faq/used-instead-azure-domain-services-contributor-role-least-privilege/2026-10-20T17:34:23+00:00https://nhimg.org/faq/which-logs-show-evidence-of-dfscoerce/2026-10-20T17:34:26+00:00https://nhimg.org/faq/which-logs-show-evidence-of-kerberos-key-list-attack/2026-10-20T17:34:30+00:00https://nhimg.org/faq/which-logs-show-evidence-of-pass-the-key/2026-10-20T17:34:31+00:00https://nhimg.org/faq/how-do-attackers-abuse-modlishka/2026-10-20T17:34:35+00:00https://nhimg.org/faq/how-do-defenders-use-gophish/2026-10-20T17:34:38+00:00https://nhimg.org/faq/how-do-defenders-use-email-security-gateway/2026-10-20T17:34:41+00:00https://nhimg.org/faq/what-does-domain-spoofing-look-like-in-a-real-intrusion/2026-10-20T17:34:44+00:00https://nhimg.org/faq/what-mitigations-reduce-the-risk-of-smtp-smuggling/2026-10-20T17:34:49+00:00https://nhimg.org/faq/what-mitigations-reduce-the-risk-of-whaling-attack/2026-10-20T17:34:52+00:00https://nhimg.org/faq/which-logs-show-evidence-of-calendar-phishing/2026-10-20T17:34:54+00:00https://nhimg.org/faq/how-can-defenders-detect-malicious-use-of-bginfoexe/2026-10-20T17:34:55+00:00https://nhimg.org/faq/which-systems-are-most-exposed-to-impersonation-phishing/2026-10-20T17:34:58+00:00https://nhimg.org/faq/how-can-defenders-detect-malicious-use-of-cscexe/2026-10-20T17:35:00+00:00https://nhimg.org/faq/how-can-defenders-detect-malicious-use-of-devtunnelexe/2026-10-20T17:35:02+00:00https://nhimg.org/faq/how-can-defenders-detect-malicious-use-of-eventvwrexe/2026-10-20T17:35:10+00:00https://nhimg.org/faq/how-can-defenders-detect-malicious-use-of-diskshadowexe/2026-10-20T17:35:12+00:00https://nhimg.org/faq/how-can-defenders-detect-malicious-use-of-fingerexe/2026-10-20T17:35:15+00:00https://nhimg.org/faq/how-can-defenders-detect-malicious-use-of-makecabexe/2026-10-20T17:35:18+00:00https://nhimg.org/faq/how-can-defenders-detect-malicious-use-of-osacompile/2026-10-20T17:35:20+00:00https://nhimg.org/faq/how-can-defenders-detect-malicious-use-of-msedgeexe/2026-10-20T17:35:22+00:00https://nhimg.org/faq/how-can-defenders-detect-malicious-use-of-mofcompexe/2026-10-20T17:35:24+00:00https://nhimg.org/faq/how-can-defenders-detect-malicious-use-of-procdumpexe/2026-10-20T17:35:26+00:00https://nhimg.org/faq/how-can-defenders-detect-malicious-use-of-scexe/2026-10-20T17:35:32+00:00https://nhimg.org/faq/how-can-defenders-detect-malicious-use-of-screencapture/2026-10-20T17:35:34+00:00https://nhimg.org/faq/how-can-defenders-detect-malicious-use-of-setupapidll/2026-10-20T17:35:39+00:00https://nhimg.org/faq/how-can-defenders-detect-malicious-use-of-wsresetexe/2026-10-20T17:35:42+00:00https://nhimg.org/faq/how-can-defenders-detect-malicious-use-of-wslexe/2026-10-20T17:35:44+00:00https://nhimg.org/faq/how-can-defenders-detect-malicious-use-of-xattr/2026-10-20T17:35:46+00:00https://nhimg.org/faq/how-can-security-teams-detect-antivirus-av-bypass/2026-10-20T17:35:48+00:00https://nhimg.org/faq/how-can-security-teams-detect-dpapi-secrets/2026-10-20T17:35:51+00:00https://nhimg.org/faq/how-can-security-teams-detect-windows-local-privilege-escalation/2026-10-20T17:35:56+00:00https://nhimg.org/faq/how-do-attackers-abuse-android-debug-bridge-adb/2026-10-20T17:35:58+00:00https://nhimg.org/faq/how-do-attackers-abuse-atbrokerexe/2026-10-20T17:36:04+00:00https://nhimg.org/faq/how-do-attackers-abuse-cmdkeyexe/2026-10-20T17:36:07+00:00https://nhimg.org/faq/how-do-attackers-abuse-computerdefaultsexe/2026-10-20T17:36:09+00:00https://nhimg.org/faq/how-do-attackers-abuse-certreqexe/2026-10-20T17:36:11+00:00https://nhimg.org/faq/how-do-attackers-abuse-cscriptexe/2026-10-20T17:36:14+00:00https://nhimg.org/faq/how-do-attackers-abuse-diantzexe/2026-10-20T17:36:17+00:00https://nhimg.org/faq/how-do-attackers-abuse-csrutil/2026-10-20T17:36:19+00:00https://nhimg.org/faq/how-do-attackers-abuse-dscl/2026-10-20T17:36:20+00:00https://nhimg.org/faq/how-do-attackers-abuse-msxslexe/2026-10-20T17:36:25+00:00https://nhimg.org/faq/how-do-attackers-abuse-findstrexe/2026-10-20T17:36:28+00:00https://nhimg.org/faq/how-do-attackers-abuse-procdump/2026-10-20T17:36:30+00:00https://nhimg.org/faq/how-do-attackers-abuse-runonceexe/2026-10-20T17:36:31+00:00https://nhimg.org/faq/how-do-attackers-abuse-scrobjdll/2026-10-20T17:36:37+00:00https://nhimg.org/faq/how-do-attackers-abuse-sysadminctl/2026-10-20T17:36:38+00:00https://nhimg.org/faq/how-do-attackers-abuse-shell32dll/2026-10-20T17:36:41+00:00https://nhimg.org/faq/how-do-attackers-abuse-sysinternals-suite/2026-10-20T17:36:42+00:00