ACCS2018

Microsoft Active Directory is a major infrastructure component of many organizations. While Active Directory is a great tool that enables enterprise IT to manage its environment, it is also one of the most targeted platforms by attackers and penetration testers. This session will follow the journey of one institution in better protecting its Active Directory environment, discuss certain measures and techniques that can be used to protect Active Directory, and share some of the results in the implementation of these measures and techniques. The audience will walk away with the understanding of a few common attack techniques targeting Active Directory and windows platforms, countermeasures that should be implemented in their environment to defend against such attacks, and the "gotchas" of some of these implementations.