353 - The Microsoft AD Tier Model explained
Summary
Hosts Tobias and UC discuss the newly released Microsoft Active Directory Tier Model, an open-source PowerShell tool for securing enterprise environments. They debate AD's continued relevance in 2026, emphasizing its role in hybrid attack paths and ransomware defenses. The episode covers implementation strategies, including greenfield deployments versus existing migrations, and stresses the need for rigorous testing and monitoring to manage security boundaries effectively.
Topics discussed
Intro: Summer updates, handwriting practice, and boat life
Microsoft releases Active Directory Tier Model on GitHub
Is Active Directory still relevant in 2026?
Toby's perspective: Cloud-first vs. AD attack paths
Technical details of the AD Tier Model deployment
Infrastructure as Code approach and lack of rollback
Prerequisites and greenfield vs. existing environments
Monitoring, Sentinel integration, and closing thoughts
Listen ad-free on Castria