Digital Forensics and Incident Response, Offensive Operations
Whether performed by an insider threat, or by an external threat that's managed to get a foothold inside, the next step in the attacker's dance is usually the pivot: moving from one host to another to expand control or pillage a particular resource. In this talk we will look at some of the more commonly encountered pivot techniques to help you understand, detect, and deter malicious, lateral movement within your network.
Microsoftは、様々なシングルサインオン（SSO）のシステムをユーザーに提供しています。しかし、SSO のために利用されるクレデンシャル情報は、長い間攻撃者に狙われてきました。Pass the HashやPass the Ticket、Pass the Tokenなどの攻撃により、攻撃者はオンプレミス環境のみならずクラウド環境へまでも、ネットワークアクセスができるようになることがあります。これらの攻撃の詳細や、関連するリスクを軽減するための最新のコントロールについて紹介します。
Microsoft provides users with the convenience of single-sign-on (SSO) solutions. But the authorisation credentials upon which SSO relies have long been targeted by attackers. Pass-the-hash, pass-the-ticket, pass-the-token, and other attacks allow attackers to move freely about your network, even between your on-prem and cloud environments. Learn more about these attacks and the latest controls to mitigate their associated risk.
