Ransomware, Risk, & Recovery: Protecting and Creating Resilience for Hybrid Active Directory
summary
Active Directory is the central attack vector and 90% of breaches touch it; one example shows 146 domain controllers wiped in 7 minutes and recovery can take nine days. Recommendations: store AD backups off-domain, test DR quarterly, aim for 24-hour forest recovery. Tools demonstrated include purplenight.com free AD assessment, monitoring with Directory Services Protector (records and can undo AD changes) and an automated 28-step Active Directory Forest Recovery that claims fastest, file-minimal, and 100% malware-free restores.
AI-written summary · about
chapters (6)
- 0:00Start
- 6:07Identity Is Central to Modern Security
- 7:01Hybrid is the Dominant Identity Architecture
- 8:26Active Directory is Central box to Hybrid Identity
- 11:38Active Directory and SolarWinds / Hafnium
- 13:49Maersk and NotPetya
related talks
49mSecuring Entry Points and Active Directory to Prevent Ransomware Attacks
40mTop Active Directory Attacks: Understand, then Prevent and Detect
47mSafeguarding The Security Posture Of Your AD, Pre-Attack And Post-Attack
50mBeyond the Mcse: Active Directory for the Security Professional
50mHybrid Active Directory Attacks: Anatomy and Defenses
06mA Battle Plan for Disaster Recovery in the Wake of Ransomare
40mWhat’s Old is New: Hybrid Security for Microsoft Azure and On-Premises Tech
53mThe Importance of Identity-Centric Security in 2024