دوره Altered Security – AD CS Attacks for Red and Blue Teams

Identity plays a crucial role in security of an enterprise environment. Certainly, Identity is the new security perimeter. In an enterprise environment, Identity is usually managed by Active Directory or by Azure AD in case of a Hybrid Identity. An often-overlooked part of enterprise infrastructure is Active Directory Certificate Services (AD CS). AD CS is a Windows Server Role that implements Public Key Infrastructure and can be used for user authentication, machine authentication, document signing, email signing, file encryption and so much more. This makes AD CS a crucial part of Identity Management.

Syllabus

1. AD CS Enumeration
2. AD CS Local Privilege Escalation
3. AD CS Domain Privilege Escalation
4. AD CS Pivoting and Lateral Movement
5. AD CS Theft and Collection
6. AD CS Local and Domain Persistence
7. Abusing Cross Forest and External Trusted CAs
8. Abusing Azure CBA for Lateral Movement and Persistence on Cloud
9. Evasion and Bypasses
10. AD CS Defence – Prevention and Detection

Altered Security – AD CS Attacks for Red and Blue Teams