Zero to Full Domain Administrator: Real-World Ransomware Incident
summary
Follows an attacker’s chain of actions that escalated from initial access to full Active Directory domain administrator takeover, resulting in a ransomware incident. Covers the attacker techniques and digital footprints used during that real-world compromise, illustrating how the escalation and breach unfolded.
AI-written summary · about
chapters (7)
- 0:00Start
- 8:45Gathering the Evidence
- 16:42Recovery Plan
- 32:52Disabled Security
- 35:14Enable Credentials
- 40:54Remote Desktop to the Domain Controller
- 42:44Takeaways
related talks
41mRansomware Incident Response - The Real-World Story of a Ransomware Attack
32mSurviving a Ransomware Attack - Lessons from the Field
21mRansomware Attack: Lessons Learned
52mRansomware 101: Get Smart Understanding Real Attacks
51mHacker’s Perspective on Your Infrastructure: Lessons from the Field
32mRansomware, Risk, & Recovery: Protecting and Creating Resilience for Hybrid Active Directory
40mRansomware: New Recipe For An Old Dish
49mStories from the trenches - How a red team exercise gained full control of a client network