Attacking Active Directory and Advanced Methods of Defense

Instructor - Adam Steed & Andrew Allen

Pre-Requisites -A basic to intermediate understanding of how Active Directory works including day to day administration of users and implementing group policy.

Abstract - This hands on workshop teaches you how to both attack and defend Active Directory. We will start by deploying an Active Directory environment using the typical security settings found in most medium to large organizations. Participants will then learn current common methods and tools used to exploit Active Directory against their test environments. Participants will create a hardened Active Directory environment using advanced methods to secure domain controllers from attack and then try to compromise their hardened environments.

Required materials - All participants will need be bring a laptop to the workshop that can be used to spin up virtual machines or have access to a personal AWS or Azure instance.