Jim Sykora
banner
jimsycurity.adminsdholder.com
Jim Sykora
@jimsycurity.adminsdholder.com
I enjoy security, technology, learning, books, & the great outdoors.
Trying to be human & kind.
Opinions = mine. He/Him/Hän

https://github.com/JimSycurity
https://www.adminsdholder.com
Pinned
Introduction:
- rural MN
- very happily married
- adult kids, 😺 🐶
Work:
- Tech, #InfoSec, #ActiveDirectory, #CyberSecurity
Passions:
- Outdoors, woodworking, tinkering, using my white male privilege to help others, music, long walks w/ 🐕, learning, books, following rabbit holes
Reposted by Jim Sykora
you can just go ask crows stuff instead of asking chatgpt
November 6, 2025 at 12:14 PM
Are subterranean sandwiches natural burrowers or do they inhabit the burrows of other creatures similar to burrowing owls?
November 5, 2025 at 4:25 AM
Reposted by Jim Sykora
Heads up hackers, tell us your wants, your needs, and how you like your squirrels fed.
At the Microsoft Security Response Center (MSRC), your feedback drives our innovation. Based on your input, we’ve introduced three new features designed to make your experience more efficient, transparent, and user-friendly.

Learn more in our blog post: www.microsoft.com/en-us/msrc/b...
October 31, 2025 at 3:48 PM
Note: Work related

I do Active Directory stuff for a living. Security research to be more specific. One of my favorite niche AD topics is AdminSDHolder. It's even my vanity domain.

I wrote a 159 pg book about AdminSDHolder. I'm kinda proud of it.

specterops.io/resources/ad...
AdminSDHolder Misconceptions & Misconfigurations - SpecterOps
AdminSDHolder is an object and associated process in Active Directory Domain Services (AD DS) that helps protect specific sensitive and highly privileged accounts from being manipulated. This topic is...
specterops.io
October 31, 2025 at 7:47 PM
Reposted by Jim Sykora
NTLM relay research is evolving!

Join Nick Powers & @tw1sm.bsky.social TOMORROW as they share new methods to enumerate EPA enforcement across MSSQL, HTTP, & more—and intro RelayInformer, expanding attacker-perspective coverage for key protocols.

Grab your spot → ghst.ly/oct-web-bsky
October 29, 2025 at 10:25 PM
Reposted by Jim Sykora
Fund Me Fridays is back!

In honor of Link, who remains unjustly banned, I will be reposting mutual aid links under this thread.

Drop your links and let’s meet some needs!
October 24, 2025 at 4:34 PM
Reposted by Jim Sykora
Credential Guard was supposed to end credential dumping. It didn't.

Valdemar Carøe just dropped a new blog post detailing techniques for extracting credentials on fully patched Windows 11 & Server 2025 with modern protections enabled.

Read for more: ghst.ly/4qtl2rm
Catching Credential Guard Off Guard - SpecterOps
Uncovering the protection mechanisms provided by modern Windows security features and identifying new methods for credential dumping.
ghst.ly
October 23, 2025 at 5:45 PM
Reposted by Jim Sykora
Do you or somebody you know have a Windows 10 that isn't fit for a Windows 11 upgrade? (e.g. no TPM)

1. Get a Windows 11 25H2 ISO
2. Run `setup /product server`

Enjoy your Windows 11 with no coerced Microsoft Account, TPM features, etc.
October 17, 2025 at 1:36 PM
Reposted by Jim Sykora
Still in testing, but it’s a pattern anyone can use to manage Intune like any other Infrastructure as Code system.

github.com/AllwaysHyPe/...
GitHub - AllwaysHyPe/IntuneStack
Contribute to AllwaysHyPe/IntuneStack development by creating an account on GitHub.
github.com
October 21, 2025 at 3:01 AM
Reposted by Jim Sykora
October 20, 2025 at 8:27 PM
Reposted by Jim Sykora
Introducing PingOneHound, a BloodHound extension to map and remediate attack paths in PingOne.

@andyrobbins.bsky.social dives in to the architecture and mechanics in our latest blog post. Learn more & get started today. ghst.ly/3WLqlVd
PingOne Attack Paths - SpecterOps
You can use PingOneHound in conjunction with BloodHound Community Edition to discover, analyze, execute, and remediate identity-based attack paths in PingOne instances.
ghst.ly
October 20, 2025 at 7:19 PM
Reposted by Jim Sykora
Seriously, I love this post so much - Good weekend timeline cleanser: "Root for Your Friends · Joseph Thacker"

m.cje.io/3KYvnLt
Root for Your Friends
Discover the power of rooting for your friends and how it can amplify success for everyone involved.
m.cje.io
October 18, 2025 at 10:39 PM
Reposted by Jim Sykora
just watched a dozen people ask microsoft copilot experts their most pressing questions and those questions were 90% “how do i turn it off?” and “when i turn it off, is it really off or is it spying on me?”
October 9, 2025 at 1:45 PM
Reposted by Jim Sykora
chat, its been another lovely week of internet schizophrenia. please enjoy this cute video of this kitty cat
October 5, 2025 at 5:59 PM
Reposted by Jim Sykora
A little OpenGraph POC for mapping PE header imports of all .dll and .exe files in a fresh Windows install. These are all the binaries that have some kind of import chain leading to kernel32.dll
October 2, 2025 at 4:51 PM
Reposted by Jim Sykora
Stunning male northern cardinal with both its tail and crest raised.
#birds #birdphotography #birdsoftheworld #photography #nature
October 1, 2025 at 7:36 PM
Reposted by Jim Sykora
NEW: I interviewed Leonard Peltier at his new home in North Dakota.

Now 81, he has a LOT to say about his ~50 years in prison, why he thinks Biden bucked the FBI to finally release him, how Indigenous people are "in danger" under Trump, and his next chapter. www.huffpost.com/entry/leonar...
‘We’re In Danger’: Leonard Peltier Has A Warning About Trump
In a sit-down interview, the Indigenous rights activist reflects on his nearly 50 years in prison, why he thinks Biden bucked the FBI to free him, and how tribes are “in danger” under Trump.
www.huffpost.com
September 30, 2025 at 1:52 PM
Reposted by Jim Sykora
September 25, 2025 at 1:04 PM
Reposted by Jim Sykora
BLOG: Upgrading to Windows Server 2025 from Windows Server 2012 R2, 2016, 2019, or 2022 using Media (ISO)

techcommunity.microsoft.com/blog/windows...
Upgrading to Windows Server 2025 from Windows Server 2012 R2, 2016, 2019, or 2022 using Media (ISO) | Microsoft Community Hub
About media-based upgrade to Windows Server 2025 With N-4 media based upgrades, you can upgrade your organization’s physical devices and virtual machines...
techcommunity.microsoft.com
September 24, 2025 at 6:04 PM
Reposted by Jim Sykora
i challenge you to find cooler news today than “despite all odds against American scientific research rn, a CO researcher developed a temperature-stable, single dose rabies vaccine that works bc of particles coated in CANDY & SAPPHIRE, & it could help reduce rabies deaths in places w/o electricity”
September 23, 2025 at 4:33 PM
Reposted by Jim Sykora
On January 1st, the sky was absolutely wild in Grand Marais, MN. I still think about this sunset on a regular basis.

#sunset #LakeSuperior #Minnesota #landscape #PhotographersUnited
September 24, 2025 at 12:09 AM
Apple crisp for breakfast.
September 23, 2025 at 1:13 PM
Howdy, Gizmo's dad here. Did some hiking with Gizmo.
September 22, 2025 at 6:01 PM
Reposted by Jim Sykora
This is Annie. She freaking loves fall. 13/10 (FB: James Osborne)
September 22, 2025 at 2:55 PM
Reposted by Jim Sykora
Excited to speak this weekend at @pancakescon.com! Come check out what I’ve been cooking the last few weeks!
From DACLs to dragons: @winterknight.net is bringing the ultimate mashup to @pancakescon.com.

Half Windows security deep-dive, half D&D villain masterclass. Because why choose between protecting your filesystem and crafting the perfect antagonist? 🐉

Learn more: pancakescon.com/
September 17, 2025 at 7:05 PM