Red Vs. Blue - Modern Active Directory Attacks, Detection, And Protection
Explore advanced Active Directory attack methods, detection techniques for Golden and Silver Tickets, and effective mitigation strategies. Learn to identify and protect against sophisticated network intrusions.
Open Source Identity Management in the Enterprise
Explore Red Hat's integration of open source solutions for seamless enterprise identity management, covering SAML, Kerberos, LDAP, and more. Learn about scaling for cloud environments and best practices.
Tooling Up for Kerberos
Explore Kerberos security with custom tools, focusing on local machine vulnerabilities and privilege escalation. Gain insights into complex Kerberos artifacts for enterprise network protection.
Server Tailgating - A Chosen-Plaintext Attack on RDP
Uncover a chosen-plaintext attack on Windows authentication, exploiting a vulnerability in common protocols. Learn about the attack's mechanics, implications for network security, and mitigation strategies.
Economics, Physics, Psychology & Relation to Technical Aspects of Counter Intelligence
Explore economic, physical, and psychological aspects of counter-intelligence, examining authentication protocols, learned helplessness, and interactive risk in cybersecurity.
Pass the Hash and Other Credential Theft - Reuse - Mitigating Risk
Explore Pass the Hash attacks and Microsoft's recommended mitigations, including credential theft prevention, authentication policies, and platform changes for enhanced cybersecurity.
Intro to Dynamic Access Control in Windows Server 2012
Explore Dynamic Access Control in Windows Server 2012, covering components, classification, expressions, claims, policies, and Kerberos for enhanced security and resource management.
Et Tu Kerberos
Explore Kerberos authentication vulnerabilities and attack techniques in this cybersecurity deep dive, enhancing your network defense strategies.
A Year in the Empire
Explore Empire's evolution, new features, and design decisions in this comprehensive overview of the popular post-exploitation framework's development and community impact.
Abusing Linux Trust Relationships - Authentication Back Alleys and Forgotten Features
Explore Linux authentication vulnerabilities, trust relationships, and forgotten features to gain root access and manipulate Kerberos tickets in this security-focused deep dive.
Attackers Perspective - A Technical Demonstration of an Email Phishing Attack
Explore email phishing attacks from an attacker's perspective, covering reconnaissance, tools, payload delivery, and network enumeration techniques for improved cybersecurity awareness.
Abusing Mixed Vendor Kerberos Stacks - Exploiting Windows AD and Linux Authentication
Discover security vulnerabilities in mixed Kerberos environments and learn how to exploit weaknesses between Windows Active Directory and Linux/Unix systems for privilege escalation.
Kerberos and Authentication Updates in Samba - 2022
Discover the latest Kerberos authentication updates in Samba, including Heimdal integration, password management improvements, and Windows server compatibility features for enhanced domain controller operations.
CertifiedDCOM - The Privilege Escalation Journey to Domain Admin with DCOM
Uncover a critical DCOM vulnerability allowing remote privilege escalation to Domain Admin in Windows networks. Learn about DCOM internals and exploit techniques for Active Directory takeover.
Network File System Security Overview: Securing SMB3
Explore SMB3 security features, authentication methods, and best practices for network file systems, with insights on encryption, access control, and identity management.
Delegate to the Top - Abusing Kerberos for Arbitrary Impersonations and RCE
Explore Kerberos delegation vulnerabilities in Windows networks, learning techniques for unauthorized impersonation and remote code execution. Gain insights into potential security risks and mitigation strategies.
Windows Hello for Business Security Analysis and Authentication Protocol Deep Dive - Lecture 10
Explore Windows Hello for Business authentication internals, security vulnerabilities, and attack vectors in Azure AD environments, focusing on key provisioning and credential management.
Active Directory and DNS: A Match Made in Heck - Understanding Directory Services Integration
Dive into the intricate relationship between Active Directory and DNS, exploring security implications, management strategies, and best practices for maintaining a robust directory service infrastructure.
FIDO2 Authentication for Centrally Managed Users
Explore FIDO2/WebAuthn authentication for centralized identity management in POSIX systems, enhancing security while maintaining strict access control for organizations.
10 Years of Windows Privilege Escalation with Potatoes
Explore a decade of Windows privilege escalation techniques using "Potatoes" in this IT security talk, covering key developments and implications for system administrators and security professionals.
A Decade of Active Directory Attacks: What We've Learned and What's Next
Explore a decade of Active Directory attacks, lessons learned, and future trends in this insightful IT security talk by Sean Metcalf at TROOPERS24 conference.