Among sophisticated hackers, DCSync attacks against Kerberos are a popular choice. They facilitate access to a domain controller without the need to drop code or authenticate, frustrating most means of detection. In this post, we talk about how to detect and stop them.
We've described what Kerberos Golden Ticket forgeries are. Now it’s time to talk about how to investigate and recover from these devastating attacks on Microsoft Active Directory.
In our second QOMPLX Knowledge post, we profile Kerberos Silver Tickets: forged Ticket Granting Service (TGS) tickets.
The first installment of our QOMPLX Knowledge series examines Golden Ticket Attacks against Microsoft Active Directory. Successful attacks enable threat actors control over an Active Directory KRBTGT and access to any resource on an Active Directory Domain.
Sophisticated attacks on Active Directory were considered 'artisan' level hacks. Today, they're business as usual. What happened? Our new report tells a story 30 years in the making.
Background The broad movement towards identity-centric security is being accelerated by architectural shifts towards a zero-trust environment with point-to-point encryption between services and users. The shift to cloud and SaaS offerings—which are an important part of most users’ daily activities—is well underway. Despite more cloud-centric user experiences, Active
Subscribe today to stay informed and get regular updates from QOMPLX.
