Active Directory: Elevate your Domain Security - Part 1

Presented at SAINTCON 2019, Oct. 23, 2019, 8 a.m. (240 minutes).

**Training is limited to 40 people. Training is first come first serve!!!** Training Part 1: Students will participate in a dedicated Active Directory network to penetrate the domain. During this session, students will use red team tools like Mimikatz and Bloodhound, techniques such as Kerberoast and DCSync, and go through the steps of a penetration assessment. All tools will be run through a Windows VM. To wrap up the assessment, students will help report on issues found in the environment that can be addressed in part 2. Students will need a basic background in Windows and network infrastructure as well as some command-line experience (both cmd and PowerShell). Please bring a laptop with a hypervisor installed and capable of running a Windows 10 VM. It is preferred if you have a base Windows VM already installed that can be joined to the Active Directory environment during the training. Please visit https://www.microsoft.com/en-us/evalcenter/evaluate-windows-10-enterprise to download an evaluation copy of Windows 10, if needed. **Training is limited to 40 people. Training is first come first serve!!!**

Presenters:

  • Jim Shakespear - Southern Utah University
    I've been a member of SAINT since 2012, since I started full-time at Southern Utah University. I've had various roles in our IT department, and currently help maintain our enterprise systems including Active Directory. I've also been an adjunct professor for our CSIS department since 2015.

Links:

Similar Presentations: