Immich Deployment on Windows Server Using Docker, WSL, and SMB-Based Persistent StorageDesigning a Resilient Linux Application Stack on Windows Infrastructure.15 min read·blog.cdoherty.co.ukFeb 22
ClickFix Forensics: Proving Execution Beyond the BrowserA deep dive on ClickFix, mapping fake CAPTCHA lures to endpoint code execution, covering investigation, response, and preventative controls.7 min read·blog.cdoherty.co.ukDec 21, 2025
LAPS: The Local Administrator Password Solution For Windows Devices In Entra ID.Overview. Prerequisites. Join types. LAPS is only supported on: Microsoft Entra joined devices. Microsoft Entra hybrid joined devices. Microsoft Entra registered devices are not supported. License requirements. LAPS is available to all customers ...2 min read·blog.cdoherty.co.ukNov 30, 2025
Bypassing Microsoft Intune Compliant Device Conditional Access Requirements Using TokenSmithHow adversaries exploit Intune’s Company Portal to obtain access tokens and bypass Microsoft’s compliant device conditional access controls.1 min read·blog.cdoherty.co.ukOct 18, 2025
How Adversaries Execute AiTM Phishing Campaigns (A Practical Demonstration Using Evilginx3)An in-depth look at proxy phishing and AiTM attacks, adversary operations and SOC detection, containment and prevention strategies.1 min read·blog.cdoherty.co.ukOct 18, 2025
