LASCON 2018 has ended
Back To Schedule
Wednesday, October 24 • 9:00am - 5:00pm
Two-Day Training: Attacking Windows w/Powershell & Enterprise Active Directory Attack Playbook w/Aelon Porat (Day 2) LIMITED

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Feedback form is now closed.
Limited Capacity seats available

Enterprise Active Directory Attack Playbook for Red and Blue Teams

Microsoft Active Directory is the world's most popular directory management suite. Its prevalence, scope, and complex structure have also made it the prime target of many attacks. This training takes place inside a dedicated network, simulating a production environment with full Active Directory deployment. Students will assume the role of both an adversary and the defender, starting as a regular desktop user and gradually escalating privelges and moving laterally across the enterprise. We'll review reconnaisance techniques, discover blind spots, pivot and eventually compromise otherwise-segregated servers. Students will gain invaluable insight into how Active Directory attacks work, understanding the artifacts that they leave behind and practical preventative and monitoring controls. To reduce attack footprint and simulate a real adversary, the playbook is exclusively built on Windows scripts and tools. We will not use Metasploit, Cobalt Strike, etc. Prerequisites: As an introduction class, no previous red or blue-team experience is required. However, students are expected to be familiar with basic Windows and network infrastructure. Basic Powershell and command-line experience is recommended.

Students will need to bring their own computer, capable of simultaneously running at least two guest Windows 10 VMs.


Aelon Porat

Aelon Porat is an information security manager at Cision and a content provider at vali.training. He has extensive experience attacking and defending corporate environments. Aelon likes to jump inside networks and out of planes, and in his spare time, he enjoys demoing, speaking... Read More →

Wednesday October 24, 2018 9:00am - 5:00pm CDT
Magnolia B Room