Pass the Hash 2 - The Admin's Revenge
Explore advanced strategies to detect and prevent Pass-The-Hash attacks in Windows networks, addressing vulnerabilities and enhancing enterprise security against lateral movement.
Ozone HIPS - Unbreakable Windows
Explore cutting-edge Host Intrusion Prevention System technology for Windows, enhancing system security and resilience against cyber threats.
Shatter-Proofing Windows
Explore techniques for enhancing Windows security against shatter attacks, focusing on vulnerabilities in message-passing mechanisms and potential safeguards for system integrity.
Virtual Private Problems
Explore virtual private network vulnerabilities and security challenges in Windows environments, focusing on potential risks and mitigation strategies.
Defense in Depth - Winning in Spite of Yourself - Foiling JD
Comprehensive Windows security strategies: from email protection to advanced IP filtering. Learn to secure systems, disable vulnerable services, and implement robust defense measures.
Windows Security Configuration Guide
Comprehensive guide to configuring Windows security settings, covering best practices and advanced techniques for system administrators and security professionals.
Deep Technical Audit - How to Mitigate Risks Presented in Other Sessions
Comprehensive guide to mitigating Windows security risks through deep technical auditing, addressing vulnerabilities discussed in other sessions.
How to Stay Up-To-Date On Security Patches
Learn effective strategies for maintaining Windows 2002 security, including patch management techniques and best practices for staying current with the latest security updates.
They'll Never See It Coming!
Explore advanced Windows exploitation techniques and stealthy attack strategies to enhance your cybersecurity skills and stay ahead of potential threats.
The Devil Inside - Planning Security in Active Directory Design
Explore advanced security strategies for Active Directory design, focusing on proactive planning and robust protection against potential threats in Windows environments.
Lifting the Fog of War
Explore MS-RPC's role in Windows, its vulnerabilities, and defensive mechanisms. Learn to utilize built-in features for tracking and defending against RPC-based attacks, with practical tools and signatures.
Windows Attacks At Is The New Black - Rob Fuller And Chris Gates
Explore Windows privilege escalation techniques, from local exploits to password manipulation, with insights on persistence methods and system vulnerabilities.
Windows Owned By Default
Explore Windows vulnerabilities and default security flaws with expert Mark Baggett. Learn essential techniques for identifying and mitigating risks in Windows systems.
Antipwny - A Windows Based IDS IPS for Metasploit
Explore a Windows-based IDS/IPS for Metasploit, enhancing network security and threat detection capabilities through innovative defense mechanisms.
The TrueCrypt Audit - How It Happened and What We Found
Comprehensive analysis of the TrueCrypt audit process, covering its inception, execution, findings, and aftermath. Explores broader implications for open-source security audits and cryptography.
Check Your Privileges - Futzing with File Shares for Low Hanging Fruit
Explore SMB/CIFS vulnerabilities, bad defaults, and privilege escalation techniques in Windows networks. Learn practical security tweaks and tools for identifying and mitigating common file share risks.
Sedating the Watchdog - Abusing Security Products to Bypass Windows Protections
Explore techniques for exploiting security software vulnerabilities to bypass Windows protections, revealing potential weaknesses in defensive measures.
Securing Windows with Group Policy
Comprehensive guide to enhancing Windows security using Group Policy, covering essential techniques and best practices for system administrators and IT professionals.
Hacking Identity - A Pen Tester's Guide to IAM - Jerod Brennen
Comprehensive guide to identity and access management security, covering attack surfaces, pen testing processes, and best practices for securing user lifecycles and admin privileges.
LOLBins - Nothing to LOL About
Explore the world of LOLBins (Living Off the Land Binaries) and their potential security risks in this eye-opening presentation by Oddvar Moe at Derbycon 2018.
Gryffindor Pure JavaScript Covert Exploitation
Explore advanced JavaScript techniques for covert exploitation in red team operations, covering browser wars, security models, and analysis methods.