Active Directory Security - Defense and Response

This workshop is an intermediate level introduction to Kerberos in Active Directory environments. We will go into details of how Kerberos works at a protocol level, how encryption happens and how by design there are parts of the protocol that can be exploited. We will then work through some of the common attacks that happen against Kerberos in AD environments like the Golden Ticket, Silver Ticket, Kerberoasting etc and understand how they can be detected and responded to.

Topics

• Kerberos in AD environment
• Roasting attacks in Active Directory
• Forging attacks in Active Directory