CrackMapExec Owning Active Directory by Using Active Directory
Explore Active Directory exploitation using CrackMapExec. Learn libraries, authentication, payload modules, and execution techniques for effective penetration testing and security assessment.
Active Directory Real Defense for Domain Admins
Learn practical strategies to secure Active Directory, including limiting Domain Admin accounts, setting logon restrictions, and implementing best practices for enhanced network protection.
Active Directory - Real Defense for Domain Admins
Practical strategies for securing Domain Admins and Domain Controllers in Active Directory environments, including account management, password policies, and logon restrictions.
Windows Event Logs - Zero to Hero
Comprehensive guide to Windows Event Logs, covering forwarding, analysis, and practical applications in cybersecurity, with real-world examples and best practices.
Deploying PAWs as Part of a Strategy to Limit Credential Theft and Lateral Movement
Explore strategies to limit credential theft and lateral movement using Privileged Access Workstations (PAWs), including deployment models, Active Directory setup, and network segmentation.
The Devopsification of Windows Server 2016
Explore Windows Server 2016's DevOps-centric features, including NanoServer, DSC, OneGet, and containers. Learn how these innovations enable cloud-paced workflows and enhance security, deployment, and management.
Lessons Learned from a Ransomware Attack
Comprehensive analysis of a real-world ransomware attack on a school district, covering timeline, damage, recovery, and preventive measures for future cybersecurity preparedness.
Recertifying Active Directory Certificate Services
Explore AD CS vulnerabilities, attack vectors, and defense strategies for securing Microsoft's PKI implementation. Learn escalation scenarios, auditing techniques, and incident response.
Certified Pre-Owned - Abusing Active Directory Certificate Services
Explore AD CS vulnerabilities for credential theft, persistence, and domain escalation. Learn offensive and defensive techniques to secure Active Directory PKI implementations.
Threat Hunting in Active Directory Environment
Explore advanced threat hunting techniques in Active Directory, focusing on attacker persistence methods, privilege escalation, and covert system control. Learn to detect and mitigate sophisticated APT threats.
Is This My Domain Controller? A New Class of Active Directory Protocol Injection Attacks
Explore new Active Directory protocol injection attacks, focusing on NTLM and Kerberos vulnerabilities. Learn about attack scenarios, mitigation strategies, and essential tips for defenders.
Mobius Band - Explore Hyper-V Attack Interface through Vulnerabilities Internals
Explore Hyper-V vulnerabilities and attack interfaces, focusing on 3 RCE vulnerabilities in Microsoft's virtualization solution. Gain insights into cloud security and potential risks.
Finding a Needle in an Encrypted Haystack
Discover new techniques to exploit NTLM authentication, including a critical zero-day vulnerability enabling domain-wide machine takeover, even with strict security configurations.
Where 2 Worlds Collide - Bringing Mimikatz et al to UNIX
Explore techniques for attacking Active Directory forests from UNIX systems integrated with AD, examining tools and procedures that bridge these two worlds in cybersecurity.
Hardening Hyper-V through Offensive Security Research
Explore offensive security research techniques to enhance Hyper-V's resilience, focusing on vulnerabilities, mitigations, and Microsoft's virtualization stack security strategies.
Red Vs. Blue - Modern Active Directory Attacks, Detection, And Protection
Explore advanced Active Directory attack methods, detection techniques for Golden and Silver Tickets, and effective mitigation strategies. Learn to identify and protect against sophisticated network intrusions.
Abusing Microsoft Kerberos - Sorry You Guys Don't Get It
Explore Kerberos vulnerabilities in Microsoft Active Directory, revealing long-term security risks and challenging assumptions about authentication protocols.
Defending Your Network with Active Directory Services
Explore advanced network defense strategies using Active Directory Services, focusing on cutting-edge techniques to enhance security and protect against evolving threats.
Break Me03 Red vs Blue - Modern Active Directory Attacks Defense
Explore modern Active Directory attack techniques and defense strategies with expert Sean Metcalf in this comprehensive presentation from Derbycon 2015.
Beyond the MCSE - Active Directory for the Security Professional
Comprehensive exploration of Active Directory's critical components, security features, and vulnerabilities, empowering security professionals to better defend enterprise resources against sophisticated attacks.
Active Directory Abuse Primitives and Operation Security
Comprehensive exploration of Active Directory attack techniques, demonstrating real-world abuse primitives and attack paths. Includes practical demonstrations and operational guidance for both offensive and defensive perspectives.