In October of 2022, Founder and CTO of Trimarc Security Sean Metcalf gave a talk The Experts Conference on defending the Identity Nexus.
Abstract: As technology has evolved, so has the use of the different platforms – and inter-connecting these platforms to increase efficiencies. The challenge is that attackers leverage these connection points to gain access to data, escalate privileges, and persist. This session explores a typical corporate environment, its configuration and its weaknesses. The technology platforms explored include Active Directory, VMware vSphere, Azure AD, and Azure (IaaS, aka "cloud datacenter").
We will talk through common integration and configuration components, how attackers take advantage of these connections, and how to mitigate these attack techniques. The scenarios covered during this talk include how an attacker with "user" rights in one platform can leverage connection points and configured access to escalate privileges in another.
Download the slides from Sean's talk below. No registration required.
Keep up with Trimarc on all social media platforms: