Netwrix empowers information security and governance professionals to reclaim control over sensitive, regulated and business-critical data, regardless of where it resides. Over 10,000 organizations worldwide rely on Netwrix solutions to secure sensitive data, realize the full business value of enterprise content, pass compliance audits with less effort and expense, and increase the productivity of IT teams and knowledge workers.

In the second episode, we’ll welcome Robert Masterson (CISSP, CISM and Security Consultant at Atos) and Michael Howden (Senior Global Cybersecurity Leader and Strategic Advisor at Novacoast). These industry experts spend every day helping businesses like yours identify security gaps and protect sensitive data. Join us to hear their cybersecurity insights first hand.

Lessons from the trenches:
• How the cyberthreat landscape is changing
• Which tools will truly help you maintain a secure IT infrastructure 
• The security gaps most commonly detected in organizations like yours 
• The most effective ways to build a bridge between business leaders and IT

Learn from Industry Experts: How Businesses Like Yours Protect Sensitive Data

One of the most important and enduring impacts of the COVID-19 pandemic has been the dramatic increase in remote work. Organizations that scrambled to enable their teams to work from home effectively are now turning their attention to the security of their tools and processes and the privacy of their critical data.
 
Join Mike Paye, VP Research and Development at Netwrix, as he walks through:
 
· The impact of remote working on data privacy and security
· How to revise and replace processes to manage the increased risks
· How to ensure that employees have the correct tools to work effectively and securely

Managing Data Privacy Risks in the Work-from-Home Era (NAM)

Managing Data Privacy Risks in the Work-from-Home Era (NEMEA)

Ransomware has become one of the most pervasive and insidious cybersecurity threats. Today, criminals don’t even need much in the way of technical skills to carry out attacks, since multiple ransomware-as-a-service programs are available on the dark web. Moreover, the damage from a ransomware attack can be not just expensive but even catastrophic; some businesses never recover. Therefore, every IT team needs to build a strong protection strategy before it’s too late.
This live session will walk you through the phases of a ransomware attack and a real-life example. Then, we’ll detail how to detect an attack in its early stages and tackle it along the kill chain. By the end of the webinar, you’ll understand how to build an actionable strategy that will make your organization more resilient against ransomware attacks.

During this session, we’ll cover:
- Introduction to ransomware anatomy
- NIST-aligned actionable strategy
- Real-life example of an attack flow
- Better-together solution mapping for a layered defence strategy

Anatomy of an Attack: Ransomware Theory and Practice (NAM)

Ransomware has become one of the most pervasive and insidious cybersecurity threats. Today, criminals don’t even need much in the way of technical skills to carry out attacks, since multiple ransomware-as-a-service programs are available on the dark web. Moreover, the damage from a ransomware attack can be not just expensive but even catastrophic; some businesses never recover. Therefore, every IT team needs to build a strong protection strategy before it’s too late.
This live session will walk you through the phases of a ransomware attack and a real-life example. Then, we’ll detail how to detect an attack in its early stages and tackle it along the kill chain. By the end of the webinar, you’ll understand how to build an actionable strategy that will make your organization more resilient against ransomware attacks.
During this session, we’ll cover:
- Introduction to ransomware anatomy
- NIST-aligned actionable strategy
- Real-life example of an attack flow
- Better-together solution mapping for a layered defence strategy

Anatomy of an Attack: Ransomware Theory and Practice (NEMEA)

Active Directory (AD) is a prime target in virtually every cyberattack because bad actors know just how critical AD is in their quest to find and steal credentials and data. In this webcast, cybersecurity veterans and STEALTHbits SVPs Jeff Warren and Adam Laub are going to give you expert insight into 4 Active Directory attacks:

• LDAP Reconnaissance (PowerSploit and PowerShell)
• Local Admin Mapping (Bloodhound)
• NTDS.dit Extraction (VSSAdmin, PowerSploit, and Hashcat)
• Stealing Passwords from Memory (Mimikatz)

Their discussion will follow the same order as an attacker’s attack path—from gaining a foothold and zeroing in on targets to stealing password hashes and performing PtH and authentication-based attacks. As they go through the sequence, they will describe how each attack works, the techniques and tools used to perpetrate them, and what you can do to stop attackers in their tracks.

4 Active Directory Attacks and How to Protect Against Them

Le password trafugate e deboli sono una lacuna nelle reti IT, rendendo troppo facile per gli aggressori ottenere un punto di ingresso per rubare dati sensibili, danneggiare i sistemi e scatenare ransomware. Sfortunatamente, gli strumenti nativi di Windows spesso non sono in grado di fornire le configurazioni dettagliate e le regole richieste per le moderne policy delle password, lasciando i team IT in difficoltà per stare al passo con il panorama delle minacce in evoluzione e i requisiti di conformità in evoluzione.

Durante il webinar impareremo come: 
- Mitigare il rischio di violazioni della sicurezza dovute a password deboli o rubate
- Imporre facilmente password complesse con policy flessibili e regole efficaci
- Contrastare efficacemente il furto di credenziali e altri attacchi brute-force
- Raggiungere e mantenere la conformità normativa

L'importanza di avere una password forte e sicura [Italian]

Privileged Access Management (PAM) tools have proven to be essential components of information security and compliance programs, yet privileged account compromise remains a nagging issue despite broad scale adoption of password vaults. Stealthbits' (now part of Netwrix) approach to Privileged Access Management fills the gaps and overcomes the challenges of traditional PAM solutions, providing comprehensive visibility into an organization's privileged account footprint, surgical control over privileged account usage, and the ability to effectively eliminate the sizable threat surface privileged accounts represent through the reduction of privileged accounts. Join Martin Cannard, Stealthbits Technologies' VP of Product Strategy - Privileged Access Management, as he outlines the challenges organizations face with traditional PAM tools and how Stealthbits can help.

Privileged Access Management Solution Overview

The bad guys have dreamed up a lot of new ways to attack Active Directory and the larger Windows environment. And methods that in the past were just theoretical are now common place. Randy Franklin Smith has been talking a lot about how to detect these attacks and also how to architect your environment to prevent them – such as with the “red forest” design. In this webinar, Randy is going to show you over 12 different ways to harden Windows using Security Options in Group Policy, registry settings and more to protect against Active Directory attacks. Here is some of what will be covered:

• LSA Protection
• WDigest
• Computer Password Policy Refresh Interval
• Limit local user account logon restrictions with the S-1-5-113 (Local account) and S-1-5-114 (Local account and member of Administrators group) SIDs
• Restrict Domain and Enterprise Admins from logging on to less privileged servers and workstations
• Mark privileged accounts as "sensitive and cannot be delegated"
• Restrict NTLM by putting privileged accounts in the Protected Users security group
• Restricted Admin mode for Remote Desktop Connection
• PowerShell Script Block Logging and ConstrainedLanguage Mode

10+ Up-To-Date Ways to Harden Windows Against Modern AD Attacks with RFS

Access and permissions to data are excessive and management is highly complex and error prone. The location of sensitive data is largely unknown (especially across unstructured data repositories) and is also the primary target in virtually every breach scenario. With increasing external pressures via existing and new regulations, 3rd party demands, and customer concerns, the need to gain control over data of all types has never been more dire. A well-executed Data Access Governance (DAG) program is the solution to the problem. DAG is about making access to data exclusive. It's about limiting the number of people who have access to data - and their permissions to data - to the lowest levels possible. Stealthbits' (now part of Netwrix) Data Access Governance solution provides organizations with the capabilities and approaches needed to identify, secure, and maximize the value of data wherever it resides. Join Adam Rosen, VP of Product Strategy, as he reviews the difficult data security and privacy challenges organizations face today and how Stealthbits can help.

Data Access Governance Solution Overview

Did you know that 74% of data breaches start with privileged credential abuse? In a world where cyber security is a major concern no matter which industry you’re in, it’s a constant balance to stay at the forefront of developments while ensuring you’ve deployed the right solution for your business. In Finance, this is even of more concern when you’re dealing with the livelihoods of individuals and businesses. So where to even begin this journey?

Privileged account management (also known as PAM) has changed a great deal over the last twenty years, evolving repeatedly to keep pace with technological advancements, but regardless of these changes, it remains the first port of call when surveying a business’ security.

Since privileged accounts are so powerful, a single misuse or compromise can lead to a data breach or costly business disruption. Even if you keep privileged credentials in a vault, the accounts still exist and can be compromised by attackers. How do you know that privileged activity is not putting your organisation at risk? Netwrix can help you reduce the risk inherent in privileged accounts.

In this webinar, we’ll explore the history of PAM and examine its applicability against modern-day threats such as ransomware; you will learn about the benefits, the pitfalls, and everything in between.

Join this session to discover:

• The principle of least privilege and what it looks like in a business
• What to look for when benchmarking your own approach to security
• Reassessing PAM in light of hybrid working realities
• How to achieve zero standing privilege and just-in-time defence
• How adopting a Zero Trust model can help you strengthen security
• What is privilege escalation and how do I implement this in my business?
• Case study: what the relationship is between Netflix and traditional PAM

This session was in collaboration with The Global Treasurer.

Not All PAM is Equal: A Guide To Securing Privileged Activity in Finance

Nell'odierno ambiente di lavoro ibrido, gli utenti accedono ai loro desktop e laptop in ufficio, a casa, in viaggio e attraverso reti pubbliche. Mantenere tutto aggiornato e sicuro può essere una sfida perché la maggior parte degli strumenti non è progettata per i moderni scenari di gestione.
Netwrix è entusiasta di presentare uno strumento di sicurezza avanzato e moderno per la gestione degli endpoint. Con la piattaforma PolicyPak, puoi semplificare la gestione e migliorare la sicurezza della forza lavoro che sia in ufficio, ibrida o remota.

Guarda il nostro webinar e scopri come Netwrix PolicyPak possa aiutarti a:

• Gestire e proteggere i dispositivi Windows per i lavoratori ibridi e da remoto
• Proteggere gli endpoint da ransomware e modifiche dannose
• Modernizzare il tuo ambiente desktop senza ricostruire, sostituire o riprogettare le tecnologie legacy
• In che modo PolicyPak si integra con il portafoglio Netwrix

Presentazione di Netwrix PolicyPak: Modern Desktop Management [Italian]

Malicious actors are always eagerly looking for vulnerabilities in your IT systems that they can exploit to steal your valuable data, disrupt your business operations and more. A critical strategy for reducing these risks is to harden your IT systems by uncovering and eliminating misconfigurations and other security gaps. 
 
That might seem like a tall challenge, but the truth is, many attacks use similar tools, techniques and procedures (TTPs).

Join this webinar to learn how to harden your systems against the most common TTPs. We will cover:
- What the most common malware tools and living-off-the land (LOL) techniques are
- How to detect these attacks
- How to harden your IT systems to defend your infrastructure — and your business

System Hardening: Defending Against Common Malware Tools and LOL Techniques

This session, based on the tips from Chapter 14 of the Active Directory Administration Cookbook, focuses on security measures you can take today with your organization's Azure AD Premium or Microsoft 365 E3 licenses. Watch this on-demand webinar and you will not have to doubt if you've made the right decisions when it comes to cloud and hybrid identity!

Learn how to apply:
- Conditional Access
- Application registration policies
- Guest invitation settings 
- Portal access restrictions

Bonus: Learn how to prevent breaches by quickly detecting, investigating and responding to incidents that happen in your Azure AD.

AD Administration Cookbook. Hardening Azure AD

Cyber

Security

Active

Microsoft

Hybrid

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

AD Administration Cookbook. Hardening Azure AD

Presented by

About this talk

More from this channel