Nightmare On NTLM Street: Legacy's Revenge

Overview: We know the world runs on legacy. We know it’s not supposed to. But when vendors or LinkedInfluencers command us to kill old systems and protocols, it sometimes seems like their expectation-versus-reality connection is faulty.

This talk will walk you through the ~adventure~ of disabling a recently-deprecated Microsoft authentication protocol with numerous security problems: NTLM.

Having attempted this project in the IT environment of a mid-sized enterprise, this presentation will discuss resou Details: rces and lessons learned that could help get the job done elsewhere. It will also illustrate to those outside the field why IT and security are critical business functions, not cost centers.

For decision-makers, this is an opportunity to better understand the struggles of on-the-ground IT and security teams trying to bring outdated systems in line with industry standards. For IT and information security peers, this presentation will share valuable resources and “lessons learned” for successfully phasing out NTLM (and similar thorns-in-sides) within their own organizations.

Marina wears many hats as a cybersecurity analyst focusing on digital forensics, incident response, and OT security, w