SANS @MIC Talk - Modern Domain Deception - The risk, issues and potentiality

  • Sunday, 17 May 2020 10:00PM PST (18 May 2020 05:00 UTC)
  • Speaker: Agostino Panico

Nowadays most enterprises are build up using Microsoft Windows Active Directory, a specific environment that is based on trust. This specific architecture design useless most of the deception option available. So as Threat Hunter we need to find the unknown, but how hunt for evil if the infrastructure is based on trust and common Deception option are unavailable, or introduce more risk than mitigation?

The talk is an evaluation of the actual limitations, issues and risks of common deception mechanisms and the potentiality if we change the mindset approaching the issue from a different angle.