Specialized Hunts: Threat Hunting within Active Directory

Focused View

Guillaume Ross

50:41

87 View

Exercise Files

specialized-hunts-threat-hunting-active-directory.zip

Module 1 - Course Overview

1. Course Overview.mp4

01:13

Module 2 - Kerberos Attacks

1. Kerberos Attacks.mp4

06:05

2. Kerberoasting.mp4

07:55

3. Unconstrained Delegation.mp4

10:21

Module 3 - Common Persistence Methods

1. AD Persistence.mp4

01:27

2. AdminSDHolder and GenericAll.mp4

04:02

3. Malicious GPOs.mp4

05:54

4. SID History Abuse.mp4

03:56

5. Summary.mp4

00:56

Module 4 - Replication Based Attacks

1. Replication Based Attacks.mp4

02:02

2. Hunting for Replication Attacks.mp4

05:36

3. Course Summary.mp4

01:14

Description

Active Directory is used in most medium and large companies, making it a significant target for abuse. This course will teach you how to hunt for threats in Active Directory to uncover malicious activity rapidly, allowing you to respond faster

What You'll Learn?

Medium and large companies are constant targets for attackers, and abusing Active Directory is one method used in attacks. In this course, Specialized Hunts: Threat Hunting within Active Directory, you’ll learn to hunt for threats specific to Active Directory. First, you’ll explore Kerberos attacks and how to discover them. Next, you’ll discover different persistence methods used on AD, and how to hunt for them. Finally, you’ll learn how to hunt for replication based attacks on AD. When you’re finished with this course, you’ll have the skills and knowledge of threat hunting needed to hunt for threats specific to Active Directory.

More details

User Reviews

Rating

average 0

Total votes0

Focused display

Cyber Security

Network Security

Active Directory

Guillaume Ross

Instructor's Courses

Guillaume Ross is an experienced information security professional, providing services to many organizations as the lead consultant and founder of Caffeine Security Inc. Having worked in multiple verticals, from Fortune 50 to startups, his specialty is providing the right security program and architecture for each specific environment and company, and leading blue teams.

Pluralsight

View courses Pluralsight

Pluralsight, LLC is an American privately held online education company that offers a variety of video training courses for software developers, IT administrators, and creative professionals through its website. Founded in 2004 by Aaron Skonnard, Keith Brown, Fritz Onion, and Bill Williams, the company has its headquarters in Farmington, Utah. As of July 2018, it uses more than 1,400 subject-matter experts as authors, and offers more than 7,000 courses in its catalog. Since first moving its courses online in 2007, the company has expanded, developing a full enterprise platform, and adding skills assessment modules.