Finding Our Path: How We're Trying to Improve Active Directory Security
0Finding Our Path: How We're Trying to Improve Active Directory Security
Andy Robbins | Adversary Resilience Lead, SpecterOps
Rohan Vazarkar | Operator and Developer, SpecterOps
Will Schroeder | Operator and Researcher, SpectorOps
Location: South Seas ABE
Date: Thursday, August 8 | 11:00am-11:50am
Format: 50-Minute Briefings
Track: Enterprise
As the dominant directory service solution, Active Directory persists as the crucial backbone of identity, authentication, and security for organizations of all sizes. Over time, nearly every Active Directory environment becomes an unwieldy, complex, and dynamic web of operating systems, user behaviors, and configurations. Historically, understanding the implications of any one user logon or configuration has taken hours -- understanding the implications of millions of user logons and configurations was almost impossible.
In this talk, we will share our success stories, lessons learned, and methodologies for enumerating, understanding, and mitigating the risks posed by disparate user behaviors and configurations. Whether your network has 50, 5,000, or 500,000 computers joined to Active Directory, you’ll walk away from this talk knowing how to greatly enhance your organization’s Active Directory security posture in days or weeks, not years. We will also demonstrate several attack primitives that are newly tracked by BloodHound, including Resource-Based Constrained Delegation.
Black Hat - USA - 2019 Hacking conference
#hacking, #hackers, #infosec, #opsec, #IT, #security