Hoedown Roundup: Wrangling Active Directory Misconfigurations, Texas Style!
Presents hoedown Roundup: Wrangling Active Directory Misconfigurations, Texas Style and evaluates key implications for security practitioners.
Summary
Overview: A Security Fest presenter delivers "Hoedown Roundup," a Texas-themed guide to wrangling Active Directory misconfigurations from a purple team perspective.
Key Topics: Active Directory fundamentals and domain controller roles; common AD misconfigurations exploited in assessments; purple team methodology combining offensive findings with defensive validation; and security operations as unsung heroes.
Technical Details: The speaker explains domain controllers as authentication authorities processing access requests based on directory permissions, then walks through typical assessment approaches for identifying exploitable AD misconfigurations in enterprise environments.
Takeaways: AD misconfigurations remain a primary attack path in enterprise environments. Purple teams should systematically assess and remediate directory permissions, delegation, and authentication weaknesses.
Related talks
Black Hat·37 min
Industry experts analyze emerging threats surrounding Threat Hunting in Active Directory Environment.
Black Hat·49 min
Presenters detail vulnerability discovery and exploitation in Red Vs. Blue: Modern Active Directory Attacks, Detection, And Protection.
DragonJAR - Hacking y Seguridad Informática·1 hr 2 min
Francisco Gabriel Canteli
Reviews active Directory: Post Exploitation Attacks and evaluates key implications for security practitioners.