From Workstation to Domain Admin - Why Secure Administration Isn't Secure and How to Fix It
Explore a comprehensive Black Hat conference talk that delves into the vulnerabilities of secure administration practices and offers solutions to enhance cybersecurity. Learn why traditional security measures may fall short in protecting organizations from targeted attacks and compromises. Discover newer "secure" admin methods, exploitation techniques for typical administration practices, and recommendations for multi-factor authentication. Examine the pros and cons of enterprise password vaults, including potential weaknesses and attack vectors. Investigate the concept of admin forests, their implementation, and cross-forest administration. Gain insights into AD defensive pillars, administrative credential isolation, and protection strategies. Understand the challenges of convincing admins to adopt new systems and explore a workable admin system deployment. Analyze product permission requirements and their impact on overall security posture.