DEFCON 2017: Transcript – Hacking the Cloud We have an Identity problem and not the kind you think of when you look in the mirror. Attacks have shifted from the…
Let’s look at recon in a cloud-type environment. You have a customer. They’ve hired you to come in and pen test, red team their environment, and they said, “We want…
Detecting Kerberoasting Activity DEFCON 2017: Transcript – Hacking the Cloud This is “Detecting the Elusive: Active Directory Threat Hunting”, and I am Sean Metcalf. I’m the founder of Trimarc, a…
WriterDetecting Password Spraying with Security Event Auditing Detecting the Elusive: Active Directory Threat Hunting Kerberoasting can be an effective method for extracting service account credentials from Active Directory as a…
WriterHardening Azure AD in the Face of Emerging Threats Detecting Kerberoasting Activity A common method attackers leverage as well as many penetration testers and Red Teamers is called “password spraying”.…
WriterIn September of 2021, Trimarc Founder & CTO Sean Metcalf presented at Quest’s The Experts Conference. “This presentation covers some attacks that involve Microsoft cloud on-prem components as well as…
WriterIn May 2020, I presented some Active Directory security topics in a Trimarc Webcast called “Securing Active Directory: Resolving Common Issues” and included some information I put together relating to…
WriterFor most of 2019, I was digging into Office 365 and Azure AD and looking at features as part of the development of the new Trimarc Microsoft Cloud Security Assessment…
WriterMany are familiar with Active Directory, the on-premises directory and authentication system that is available with Windows Server, but exactly what is Azure Active Directory? Azure Active Directory (Azure AD…
WriterAttacking and Defending the Microsoft Cloud (Office 365 & Azure AD) Sean Metcalf (Trimarc) & Mark Morowczynski (Principal Program Manager, Microsoft) The allure of the “Cloud” is indisputable. Organizations are…
