Posts

Showing posts with the label et al

Randy Franklin Smith - Recent Security Features in Active Directory You Probably Aren't Using

Want to hear all about Recent Security Features in Active Directory You Probably Aren't Using? See my presentation at The Experts Conference, Aug 27-28 in Charleston, SC. Use this special reg code for ½ off: 50%OFFTEC!*! https://bit.ly/2DHLcki #TheExpertsConference from Security, et al http://www.ultimatewindowssecurity.com/blog/default.aspx?p=57e75dfa-d180-43b3-9b1f-df71ff559a58

Randy Franklin Smith - Active Directory security features you probably aren’t using and more in my sessions at The Experts Conference 2019

Randy Franklin Smith - How to Detect Pass-the-Hash Attacks Blog Series

Randy Franklin Smith - Come meet Randy in Orlando at Microsoft Ignite at Quest's Booth #1818

Come meet Randy in Orlando at Microsoft Ignite at Quest's Booth #1818 Today everything needs to be secure, but you need to start with Active Directory.  Because if Active Directory isn’t secure – nothing else in your organization is regardless of operating system, security products or procedures.  That’s a strong statement but one that Randy Franklin Smith, creator of UltimateWindowsSecurity.com, will back up with facts.  In this fast-paced presentation Randy will spotlight the multitudinous ways that virtually any component or information on your network can be compromised if the attacker first gains unauthorized access to AD. The good news is that Active Directory was designed well and has stood the test of time with limited weaknesses being discovered.  Active Directory security is a matter of design, comprehensive management and monitoring and this is the basis for a list of Fundamentals for Securing Active Directory that Randy will share. After...

Randy Franklin Smith - Detecting Pass-the-Hash with Honeypots

Jeff Warren of StealthBits and I were talking about this really cool idea he had a while back About detecting pass the hash attacks with a special kind of honey pot. Jeff is doing a webinar on this on Thursday August 9,    2018 and here’s more information about it and the links. Pass-the-hash and pass-the-ticket attacks can be some of the most effective techniques for attackers to use to move laterally throughout your organization, and also the most difficult to detect. Most detections rely on differentiating between what is normal behavior for a user and what is abnormal. While this can be effective, it is also time consuming and results in lots of false positives. In this webinar, Jeff will explore how to use modern honeypot techniques to lay traps for attackers and emphatically detect the use of the pass-the-hash technique within your organization. If you are unable to join the live webinar, register to receive a video recording after the event. Use the links below to re...