AD is dead, long live AAD. Moving laterally in the age of the cloud

No ratings

Presented at RootedCON 2020 by

Fernando Román

Active Directory has been a target for attackers for the last decade and techniques for lateral movement are well known being a hot topic at the moment due to enterprise ransom attacks using them.With the advent of the cloud, organizations are extending their identities to Azure AD creating new paths of lateral movement that are still to be well understood. During the talk, Azure AD and it´s dependencies will be explored and techniques used for lateral movement to and from the cloud and how to harden against them will be explained.