{"id":49,"date":"2026-09-04T10:29:49","date_gmt":"2026-09-04T10:29:49","guid":{"rendered":"https:\/\/preview.deltatheme.com\/kiln\/2026\/09\/04\/the-service-account-nobody-could-name\/"},"modified":"2026-09-04T21:09:03","modified_gmt":"2026-09-04T21:09:03","slug":"the-service-account-nobody-could-name","status":"publish","type":"post","link":"https:\/\/preview.deltatheme.com\/kiln\/2026\/09\/04\/the-service-account-nobody-could-name\/","title":{"rendered":"The service account nobody could name"},"content":{"rendered":"<p>The estate had four hundred service accounts. Three hundred and ninety-one were documented. The nine that were not are the reason this engagement took eleven days instead of three.<\/p>\n<p>One of them, created in 2019 by a contractor who left in 2020, held domain-wide read on the file estate and had never rotated its password. Nobody could name it. Nobody could say what would break if it were disabled, which is exactly why it survived four audits.<\/p>\n<p>The finding is not the account. The finding is that the register and the directory disagreed, and no process existed to notice.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Four hundred service accounts, three hundred and ninety-one documented. The nine that were not are the whole finding.<\/p>\n","protected":false},"author":2,"featured_media":88,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-49","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"delta":null,"_links":{"self":[{"href":"https:\/\/preview.deltatheme.com\/kiln\/wp-json\/wp\/v2\/posts\/49","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/preview.deltatheme.com\/kiln\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/preview.deltatheme.com\/kiln\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/preview.deltatheme.com\/kiln\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/preview.deltatheme.com\/kiln\/wp-json\/wp\/v2\/comments?post=49"}],"version-history":[{"count":1,"href":"https:\/\/preview.deltatheme.com\/kiln\/wp-json\/wp\/v2\/posts\/49\/revisions"}],"predecessor-version":[{"id":122,"href":"https:\/\/preview.deltatheme.com\/kiln\/wp-json\/wp\/v2\/posts\/49\/revisions\/122"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/preview.deltatheme.com\/kiln\/wp-json\/wp\/v2\/media\/88"}],"wp:attachment":[{"href":"https:\/\/preview.deltatheme.com\/kiln\/wp-json\/wp\/v2\/media?parent=49"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/preview.deltatheme.com\/kiln\/wp-json\/wp\/v2\/categories?post=49"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/preview.deltatheme.com\/kiln\/wp-json\/wp\/v2\/tags?post=49"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}