Windows User Enumeration, Living off the land

  • Monday, 21 Oct 2019 1:00PM EDT (21 Oct 2019 17:00 UTC)
  • Speaker: Dale Hobbs

One of your users has fallen for a phishing attack! His computer has been compromised and an attacker is now actively inside your network.

We'll show you a simple method an attacker can use to leverage SMB to discover usernames and passwords. Not only will you be surprised how easy this is using the tools built into Windows, but you'll also see how to detect and defend against it.