So You Think Your Domain Controller is Secure?

Presented at DEF CON 21 (2013), Aug. 2, 2013, 3:30 p.m. (20 minutes).

Domain Controllers are the crown jewels of an organization. Once they fall, everything in the domain falls . Organizations go to great lengths to secure their domain controllers, however they often fail to properly secure the software used to manage these servers.

This presentation will cover unconventional methods for gaining domain admin by abusing commonly used management software that organizations deploy and use.

Presenters:

• Justin Hendricks - Security Engineer, Microsoft
  Justin Hendricks works on the Office 365 security team where he is involved in red teaming, penetration testing, security research, code review and tool development.

Links:

• https://defcon.org/html/defcon-21/dc-21-speakers.html#Hendricks
• https://infocon.org/cons/DEF CON/DEF CON 21/DEF CON 21 video and slides/DEF CON 21 - Justin Hendricks - So You Think Your Domain Controller is Secure - Video and Slides.mp4 (Video and Slides)
• https://www.youtube.com/watch?v=2d_6jAF6OKQ

Similar Presentations:

• TROOPERS18 (2018) / Attack and defend Microsoft Enhanced Security Administrative Environment
• HOPE 2020 Virtual Rescheduled / Launching the Cyrillic IDN TLD as the first Internationalized Domain Name in the World
• May Contain Hackers (MCH2022) / Bring Your Own IDentity