QOMPLX CISO Andy Jaquith hosts a webinar about five critical risk scenarios that chief information security officers must understand.

In this post, we talk about DCShadow attacks in which an adversary simulates an Active Directory domain controller. They're a popular tool for attackers to maintain persistence within compromised environments.

Among sophisticated hackers, DCSync attacks against Kerberos are a popular choice. They facilitate access to a domain controller without the need to drop code or authenticate, frustrating most means of detection. In this post, we talk about how to detect and stop them.

We've described what Kerberos Golden Ticket forgeries are. Now it’s time to talk about how to investigate and recover from these devastating attacks on Microsoft Active Directory.