Active Directory Security: Early Stage Attack Activities to Watch For

INTERFACE Portland
March 26th, 2019

  Presented by STEALTHbits Technologies

Attackers have demonstrated a consistent and ongoing ability to obtain access to workstations inside the network boundary through phishing and other web and email attacks. From here, attackers set their sights on gaining control of Active Directory as a means to an end; compromising Active Directory is an easy way to gain access to all critical corporate data and resources. Darin will discuss two early stage attack activities: LDAP reconnaissance and Password Spraying — that allow attackers to move laterally inside your AD environment. Detection strategies and mitigation steps will also be explained.