Главная
Study mode:
on
1
Disclaimer
2
Test your new DAs
3
Limit the number of DAS
4
Separate DA accounts from "everyday" accounts
5
Separate DA password policy
6
Set DA logon restrictions DCs only!
7
Disable Cached Creds
8
Be careful with DA service accounts
9
Microsoft Security Compliance Manager
10
A quick word about null sessions
11
Get offensive security training!
12
Questions?
Description:
Explore advanced techniques for securing Active Directory environments in this 49-minute conference talk from DerbyCon 4. Learn how to effectively manage Domain Admin accounts, implement strict password policies, and set logon restrictions to enhance overall security. Discover the importance of separating privileged accounts from everyday use, disabling cached credentials, and properly handling service accounts. Gain insights into using Microsoft Security Compliance Manager and understanding the risks associated with null sessions. Emphasize the value of offensive security training to better defend against potential threats. Conclude with a Q&A session to address specific concerns and deepen your understanding of Active Directory defense strategies.

Active Directory Real Defense for Domain Admins

Add to list
0:00 / 0:00