Rob Fuller on Twitter: "One of the smallest changes with huge effect you can make to Active Directory to help secure it against a LOT of attack paths is changing the attribute ms-DS-MachineAccountQuota = 0. Do this now, do it on Monday, but adds a pretty decent barrier to many attack paths. https://t.co/ejaYtz1KdZ" / Twitter
https://twitter.com/mubix/status/1472681102741549059