The Role of Delegation and Automation in IAM
Learn effective IAM strategies through delegation and automation in Active Directory and Azure AD, focusing on least privilege models, identity management checklists, and routine task automation.
Breaking the Attack Graph - How to Leverage Graphs to Strengthen Security in a Domain Environment
Explore how defenders can leverage graph-based thinking to strengthen security in domain environments, adapting to sophisticated attackers and enhancing prevention, detection, and investigation strategies.
Top Active Directory Attacks - Understand, then Prevent and Detect
Explore common Active Directory attacks, prevention strategies, and detection methods. Learn to secure enterprise networks against prevalent hacking techniques and enhance cybersecurity practices.
PowerShell Exploitation - PowerSploit - Bloodhound - PowerShellMafia - Obfuscation
Explore PowerShell exploitation techniques, including obfuscation and malware tactics. Learn to analyze logs, detect suspicious activities, and implement effective security measures.
Kerberoasting Revisited
Explore advanced Kerberoasting techniques, encryption types, and defenses. Learn about the "tgtdeleg" trick and Rubeus for improved Kerberoasting in this cybersecurity deep dive.
Future Forests - Realistic Strategies for AD Security & Red Forest Architecture
Strategies for implementing Microsoft's Red Forest architecture to mitigate Active Directory attacks, covering benefits, challenges, and practical steps for enhanced security in enterprise domains.
CrackMapExec Owning Active Directory by Using Active Directory
Explore Active Directory exploitation using CrackMapExec. Learn libraries, authentication, payload modules, and execution techniques for effective penetration testing and security assessment.
Active Directory Real Defense for Domain Admins
Learn practical strategies to secure Active Directory, including limiting Domain Admin accounts, setting logon restrictions, and implementing best practices for enhanced network protection.
Active Directory - Real Defense for Domain Admins
Practical strategies for securing Domain Admins and Domain Controllers in Active Directory environments, including account management, password policies, and logon restrictions.
Deploying PAWs as Part of a Strategy to Limit Credential Theft and Lateral Movement
Explore strategies to limit credential theft and lateral movement using Privileged Access Workstations (PAWs), including deployment models, Active Directory setup, and network segmentation.
Finding a Needle in an Encrypted Haystack
Discover new techniques to exploit NTLM authentication, including a critical zero-day vulnerability enabling domain-wide machine takeover, even with strict security configurations.
Abusing Microsoft Kerberos - Sorry You Guys Don't Get It
Explore Kerberos vulnerabilities in Microsoft Active Directory, revealing long-term security risks and challenging assumptions about authentication protocols.
Break Me03 Red vs Blue - Modern Active Directory Attacks Defense
Explore modern Active Directory attack techniques and defense strategies with expert Sean Metcalf in this comprehensive presentation from Derbycon 2015.
Beyond the MCSE - Active Directory for the Security Professional
Comprehensive exploration of Active Directory's critical components, security features, and vulnerabilities, empowering security professionals to better defend enterprise resources against sophisticated attacks.
Active Directory Abuse Primitives and Operation Security
Comprehensive exploration of Active Directory attack techniques, demonstrating real-world abuse primitives and attack paths. Includes practical demonstrations and operational guidance for both offensive and defensive perspectives.
A Year in the Empire
Explore Empire's evolution, new features, and design decisions in this comprehensive overview of the popular post-exploitation framework's development and community impact.
Here Be Dragons - The Unexplored Land of Active Directory ACLs
Explore the uncharted territory of Active Directory ACLs, uncovering hidden vulnerabilities and advanced attack techniques in Windows environments.
Active Directory Security - The Journey
Explore Active Directory security challenges and solutions with expert Sean Metcalf, covering essential strategies for protecting enterprise networks and data.
Invoke EmpireHound - Merging BloodHound Empire for Enhanced Red Team Workflow
Explore advanced red team techniques by merging BloodHound and Empire for enhanced workflow and more effective penetration testing strategies.
BloodHound - From Red to Blue
Explore BloodHound's versatility in both offensive and defensive cybersecurity, enhancing your ability to identify and mitigate potential vulnerabilities in network environments.
Well What Have We Here - A Year of Cyber Deception, Attribution, and Making Attackers Rethink Their Approach
Explore cyber deception techniques, attribution strategies, and methods to disrupt attacker behavior in this comprehensive cybersecurity presentation.