Hi.
In this course, we started by looking
into commonly abused attacks and misconfigurations in Active
Directory which may aid an attacker who has successfully
gained access to the environment to escalate in it.
A big part of the section focused
on getting familiar with the tools which
can help us to take these misconfigurations,
if they exist.
Other than the attacks and misconfigurations
themselves, we also discussed preventative measures
against them.
All of these gave us a solid understanding
of the offensive part and the protective actions
we can take to reduce the risk of successful exploitation,
or the existence of these misconfigurations.
Further in the course, we'll move into a discussion
on Active Directory tiering model,
coupled with privileged access workstations.
These two concepts define protection in depth
which attempts to prevent credential theft
attacks of previous users that may exist
on often compromised devices such as workstations
in the environment.
We also going further and did a practical implementation
of the Active Directory tiering model
and showcased how it can help us in limiting
privileged users from accessing non-privileged systems.
Finally, we talked about passwords
and looked into the [INAUDIBLE] passwords [INAUDIBLE],,
which provides us with an insight
into the password strength of all users in the organization.
As a conclusion to the course, we
looked into Windows Defender for Identities
as means of automated way of detecting
certain suspicious activity with our privileged users.
I really hope that this course was interesting and educational
for you.
Moreover, I truly believe that the concepts that
were discussed here will significantly
increase your organization's maturity and exposure
level against a successful compromise, should one occur.
Thank you for watching.