Part 1 · Why You Hold the Keys
1 The master key in a script 2 Why YouHold the Keys 3 You're a named role, by what you can do 4 The blast radius of one privileged account Part 2 · Separate, Least, Temporary
5 Separate,Least,Temporary 6 Two accounts, and never the twain 7 Just enough, and not a drop more 8 The chair that was still warm 9 Access that expires before it can be stolen Part 3 · Guard Every Door
10 GuardEvery Door 11 MFA on the accounts that matter most 12 The door nobody used, and nobody closed 13 One unguarded door 14 When your phone won't stop buzzing Part 4 · Secrets, Machines & the Build
15 Secrets, Machines& the Build 16 The password taped to the wall 17 The account no human watches 18 Rotate everything, not just what you used 19 The forgotten app with every key 20 When the build server is a domain controller Part 5 · See It, Respond, Prove It
21 See It,Respond, Prove It 22 Every privileged move, on the record 23 Retire the door, guard the break-glass key 24 The MFA box that voided a policy 25 Seven habits that guard the keys 26 You hold the keys. Guard them.