No Hat 2023 - M. Cheng & D. Chen
Abusing Active Directory Configuration investigates No Hat 2023 - M. Cheng & D. Chen.
Summary
Red-team perspective on compromising Active Directory using configuration abuse and OPSEC techniques. Covers AD as a Tier-1 asset and how attackers evade blue-team monitoring and hunting. Demonstrates real attack paths blending on-premises Active Directory and Azure AD, plus enumeration methodology, tactical goal selection, and evading detection during AD operations.
Related talks
CSIT Village·30 min
Chua Meng Han
Chua Meng Han examines critical vulnerabilities like CVE-2025-52691 remind us that “low-hanging fruit” still exists today.
CSIT Village·22 min
Koh Kian Woon
Koh Kian Woon examines as AI accelerates development and increases system complexity, robust defence-in-depth and deep technical expertise are becoming increasingly critical for defenders.
CSIT Village·40 min
Kenneth Huang Shaoqi
Kenneth Huang Shaoqi examines compilers generate all our code, but they don’t get it right all the time.