Explore the aftermath and lessons learned from Maersk's major NotPetya cyber-attack in June 2017 through this 51-minute Black Hat conference talk. Delve into the critical "Golden Hour" of response, the impact on Active Directory, and the recovery process. Examine the changing threat landscape and how Maersk applied these lessons to enhance cybersecurity. Learn about implementing resilient Active Directory structures, target operating models, OT frameworks, and security operating principles. Gain insights into the two-way process of improvement, cloud migration decisions, and adopting a risk-based approach to cybersecurity. Understand the importance of adapting to new threats rather than fighting the last war in this informative session presented by Andy Powell.