Aaron McPhall put together an excellent brief on using Bloodhound as a blue teaming tool to identify unknown or unintended avenues of privilege escalation in your Active Directory infrastructure. If you missed out – don’t despair! View a recording of the brief on the RISE YouTube channel.
Aaron has also made his slides available here.
RISE extends special thanks to the following for their support of this event:
ABS Technology – Hosting and fantastic refreshments
R&K Solutions – Live-streaming and recording support
Many organizations, large and small, maintain an Active Directory environment. Over time even well-managed AD environments will suffer the crud of forgotten objects. Emergency changes and other unique additions often create resources that don’t follow established governance policy. Coping with system sprawl is a fact of life in most organizations. Our tools must help us cope with this and ensure that unintended vulnerabilities are introduced into the environment.
We had a large turn out of seasoned and aspiring security professionals at the RISE Open Floor meeting this month. Thank you to all who attended and provided questions or personal experiences for the discussion. Special thanks to our hosts, ECPI University, and to TEKsystems for sponsoring pizza for the event! Continue reading