Episode 2 of "Hacking Demystified" w/ HackingDave Kennedy

Watch and listen as Sean, Jake, and Scott answer as many of your questions about AD and Azure AD as we could get to in an hour. Timestamps are below for the questions we got to. 4:12 "How do you start to understand the core concepts of Active Directory security? 9:43 "What are the most common AD and Azure AD security issues? 14:30 "Is the recommendation to enable SMB signing realistic for a large organization?" 17:50 "What are the recommended security configurations for an Active Directory Environment?" 22:08 "How can I perform an exhaustive review of AD and Azure AD apart from tools like PingCastle and Bloodhound? " 28:15 "Do you you have a perspective on finding a balance in a big enterprise on users being able to self service but able to keep a somewhat centralized security model?" 34:17 "What are your recommended approaches to minimize harm during remediation?" 40:30 "How do we help organizations prioritize findings? " 52:58 "What's the best way to handle PIM/PAM?" Music by https://www.bensound.com/free-music-for-videos

In this talk, you'll learn the What, Why, and How of utilizing the Protected Users group in your domain from Jake Hildreth, Service Lead for Trimarc's Active Directory Security Assessment.

Active Directory combines DNS functionality (with an LDAP database, Kerberos authentication, and some other stuff) to create a unified directory service platform. As such, the fates of AD and DNS will be forever linked. In fact, you might say they are now married. In this talk you will learn how to keep that marriage happy and healthy! Jim Sykora is a Security Consultant at Trimarc focused on identity security. Jim started his sysadmin path in 3rd grade & did a bunch of gigs before starting to blend operational experience & rampant curiosity with security knowledge. Jake Hildreth is the Service Lead for the Active Directory Security Assessment (ADSA) at Trimarc & maintainer of the Locksmith AD CS remediation tool. His work at Trimarc focuses on assessing AD for F500 companies. He holds the CISSP and Security+ certs.

Episode 2 of "Hacking Demystified" w/ HackingDave Kennedy

In this episode we revisit the Trimarc Crypto Challenge, an online CTF created by Trimarc and played by everyone at BSides Charm 2023. Joining us are players Luker, TVicory, and Xamaracer. All Trimarc Challenges are available for play on Challenge.TrimarcSecurity.com Music by https://www.bensound.com/free-music-for-videos

Once we accept that all technology is broken and it's coming for us, we can make peace with our eminent demise and start to fight back. In this episode, Security Consultant/Pentester @ Optiv, Garrett Foster talks SCCM and how it could be used as a means to compromise your environment...and probably steal your amazon packages from your porch. We bet it doesn't put its shopping carts back in the corral. https://twitter.com/garrfoster

Friend of the show Beto joins for a conversation about Admin Insecurities and then we move into more conversation about security careers and advice. Layout and editing by AnomalyVFX.tv