Yaron Zinar

Yaron Zinar is a Sr. Manager at CrowdStrike working on an Identity Protection product (previously Preempt). Previously, Yaron spent over 16 years at leading companies such as Google where he held various positions researching and leading big data, machine learning, and cyber security projects. Yaron is an expert on Windows Authentication protocols and has previously presented his research at top conferences such as Black Hat and DEFCON. Yaron holds an M.Sc. in Computer Science with a focus on statistical analysis.

• @YaronZi
• Dynamic Presentation Playlist

Presentations:

• 2021-11-11 10:20 - Black Hat Europe 2021 - Is This My Domain Controller? A New Class of Active Directory Protocol Injection Attacks
• 2021-08-07 16:00 - DEF CON 29 (2021) - Adventures in MitM-land: Using Machine-in-the-Middle to Attack Active Directory Authentication Schemes
• 2019-08-09 15:00 - DEF CON 27 (2019) - Relaying Credentials Has Never Been Easier: How to Easily Bypass the Latest NTLM Relay Mitigations
• 2019-08-07 14:40 - Black Hat USA 2019 - Finding a Needle in an Encrypted Haystack: Leveraging Cryptographic Abilities to Detect the Most Prevalent Attacks on Active Directory
• 2018-03-23 10:15 - Black Hat Asia 2018 - Server Tailgating - A Chosen-PlainText Attack on RDP

Copresenters:

• Eyal Karni
  • 2021-11-11 10:20 - Black Hat Europe 2021 - Is This My Domain Controller? A New Class of Active Directory Protocol Injection Attacks
  • 2021-08-07 16:00 - DEF CON 29 (2021) - Adventures in MitM-land: Using Machine-in-the-Middle to Attack Active Directory Authentication Schemes
  • 2018-03-23 10:15 - Black Hat Asia 2018 - Server Tailgating - A Chosen-PlainText Attack on RDP
• Sagi Sheinfeld
  • 2021-11-11 10:20 - Black Hat Europe 2021 - Is This My Domain Controller? A New Class of Active Directory Protocol Injection Attacks
  • 2021-08-07 16:00 - DEF CON 29 (2021) - Adventures in MitM-land: Using Machine-in-the-Middle to Attack Active Directory Authentication Schemes
• Marina Simakov
  • 2019-08-09 15:00 - DEF CON 27 (2019) - Relaying Credentials Has Never Been Easier: How to Easily Bypass the Latest NTLM Relay Mitigations
  • 2019-08-07 14:40 - Black Hat USA 2019 - Finding a Needle in an Encrypted Haystack: Leveraging Cryptographic Abilities to Detect the Most Prevalent Attacks on Active Directory
• Roman Blachman
  • 2018-03-23 10:15 - Black Hat Asia 2018 - Server Tailgating - A Chosen-PlainText Attack on RDP