Explore a comprehensive Black Hat conference talk that delves into the vulnerabilities of secure administration practices and offers solutions to enhance cybersecurity. Learn why traditional security measures may fall short in protecting organizations from targeted attacks and compromises. Discover newer "secure" admin methods, exploitation techniques for typical administration practices, and recommendations for multi-factor authentication. Examine the pros and cons of enterprise password vaults, including potential weaknesses and attack vectors. Investigate the concept of admin forests, their implementation, and cross-forest administration. Gain insights into AD defensive pillars, administrative credential isolation, and protection strategies. Understand the challenges of convincing admins to adopt new systems and explore a workable admin system deployment. Analyze product permission requirements and their impact on overall security posture.
From Workstation to Domain Admin - Why Secure Administration Isn't Secure and How to Fix It
Overview
Syllabus
Intro
black hat Newer "Secure" Admin Methods
black hat Exploiting Typical Administration
black hat MFA Recommendations
black hat Enterprise Password Vault
black hat Attacking Enterprise Password Vault
black hat Exploit Password Vault Access
black hat Password Vaults on the Internet
black hat Password Vault Config Weaknesses
black hat Admin Forest Pros & Cons
black hat Admin Forest Implementation
black hat Admin Forest Discovery
black hat Cross-Forest Administration
black hat AD Defensive Pillars
black hat Administrative Credential Isolation & Protection
black hat Admin Systems: Convincing Admins
black hat A Workable Admin System
black hat Admin Workstation Deployment
black hat Product Permission Requirements
Taught by
Black Hat
