2017 - Sean Metcalf - Detecting the Elusive Active Directory Threat Hunting
2017 - Sean Metcalf - Detecting the Elusive Active Directory Threat Hunting.
Summary
Overview: we good in the back thumbs up cool so this is detecting the elusive active directory threat hunting and i am sean metcalf i'm the founder of trimark security company a microsoft certified master and active director there's about 100 in the world i'm also a microsoft mvp i've spoken about active directory attack and defense at a number of conferences and i'm security consultant and researcher and as we just found out i run 80security.org where i post a lot of interesting security information abou
Key Topics: t the microsoft platform so what are we going to talk about so i call this active directory thread hunting thread hunting has a lot of different connotations or ideas behind it but i like to boil that down to what really
Related talks
Black Hat·37 min
Industry experts analyze emerging threats surrounding Threat Hunting in Active Directory Environment.
fwd:cloudsec North America 2025·22 min
Shahar Dorfman · Sagit Sadik
Engineers explore architecture and security mechanisms for Detecting the Undetectable: Threat Hunting in Appliance Environments.
Blue Team Village·41 min
Project Obsidian
Project Obsidian demonstrates detecting SharpHound and BloodHound reconnaissance by hunting anomalous LDAP queries and Active Directory enumeration patterns.