BSidesIA 2017 Track1: Protecting Against Advanced Attacks – Andy Thompson
BSides Iowa 2017 - Track 1
Title: "Protecting Against Advanced Targeted Attacks with IAM Best Practices"
Speaker: Andy Thompson
This talk highlights the risks of kerberos attacks on Active Directory…specifically the Golden Ticket Attack. Andy demonstrates the phases of an Advanced Targeted Attack against a SWIFT banking organization using nothing but PowerShell Empire and some bad techno music. It’s so easy a 400lb hacker in their mother’s basement could do it!