Pass the What Now? Understanding Credential Attacks in a Windows 11 World presented by SANS Principal Instructor Steve Anson

Microsoft provides users with the convenience of single-sign-on (SSO) solutions. But the authorisation credentials upon which SSO relies have long been targeted by attackers. Pass-the-hash, pass-the-ticket, pass-the-token, and other attacks allow attackers to move freely about your network, even between your on-prem and cloud environments. Learn more about these attacks and the latest controls to mitigate their associated risk.