Episode 123: Insecure Active Directory Protocols

Join Brad and Spencer from The Cyber Threat Perspective as they delve into the complexities of insecure Active Directory protocols. Learn about key vulnerabilities and how they can be addressed to enhance network security. Discover the common vulnerabilities associated with legacy Active Directory protocols. Understand the implications of running protocols like LLMNR and SMBv1. Learn about tools like PingCastle and Purple Knight for Active Directory health assessments. Explore attack techniques such as coercion with the Spooler service and NTLM relay attacks. Get insights on best practices for auditing and mitigating security risks in Active Directory environments.