Name: Maîtrisez la sécurité de l’Active Directory : détectez, répondez, récupérez
Start: 2025-06-12T09:00:00Z
End: 2025-06-12T09:00:48.000Z
Location: BrightTALK
Rating: 5

Netwrix empowers security professionals to face digital threats with confidence by enabling them to identify and protect sensitive data as well as to detect, respond to, and recover from attacks. More than 13,500 organizations across 100+ countries rely on Netwrix solutions to strengthen their security and compliance posture across all three primary attack vectors: data, identity, and infrastructure. By reducing the cybersecurity burden with Netwrix, organizations concentrate on advancing their cause while reducing cyber risk.

For more information, visit www.netwrix.com

The term “privileged access" in Windows is open to interpretation.  Are you simply talking about membership in the local Administrators group?  If so, you need to think about local accounts and if the system is joined to AD then domain accounts.  If it’s an Entra-joined Windows 11 box or an Azure VM then there’s Entra accounts that could be admins. 
But privileged access goes way beyond the Administrators group.  There are a number of admin-equivalent user rights such as “Act as part of the operating system”. 
And again, if the system is part of an AD domain, then anyone with certain group policy related permissions on the OU branch of the computer account has indirect but definite privileged access.  Likewise for systems managed by Intune.  If the system is a VM then it depends on the particular hypervisor or cloud environment.  Azure for instance provides multiple routes of privileged access into VMs based on resource group permissions.
Windows itself has multiple connection points for privileged accounts including RDP, shared folders, WinRM, RPC, etc.  Do you disable these individually or rely on Windows firewall or an external firewall?
Bottom line is there are many vectors to privileged access in Windows, and it can be confusing because so much of this functionality has accreted over time with the progression of IT eras that Windows has lived through. 
In this real training for free session, I will try to give you a comprehensive view of privileged access in Windows covering all these areas and more.  Then I will focus on key choke points that if you understand and properly control will give you confidence that privileged access to your Windows systems is truly locked down to who should actually have it.

Understanding the Multiple Layers of Privileged Access in Windows

Ransomware continues to be one of the most devastating forms of cyberattack, often leaving organizations locked out of critical systems and facing major financial losses. But how do these attacks really happen?
In this session, ethical hacker Clemens Domingo and Anthony Moillic will walk you through the anatomy of a ransomware attack—from initial access to lateral movement and payload deployment. With real-world case studies, they’ll highlight how attackers think, where organizations commonly fail, and how to tighten defenses.

You’ll learn:
The most common entry points attackers use today
How social engineering, misconfigurations, and unpatched systems lead to compromise
Real-world examples of successful attacks and near misses
How tools like PingCastle can help uncover Active Directory risks before attackers do

Ransomware Revealed: Tactics, Entry Points, and Real-World Lessons

Most insider threats start on the machines you and your team manage, where users have too much access, USB ports are wide open, and risky apps slip through the cracks. 
Join Jeremy Moskowitz, 20X Microsoft MVP and CTO of Endpoints at Netwrix, to learn how desktop admins and IT Security Pros can take back control, close dangerous gaps, and stop data loss before it starts.
· Spot common endpoint misconfigurations that enable insider threats
· Learn how to remove local admin rights without breaking workflows
· See how to control USBs, apps, and data movement across endpoints
· Discover how to enforce policy and gain visibility without complicated scripting

Block Insider Threats Where They Start – at the Endpoint

Le principe du moindre privilège est un pilier fondamental des architectures Zero Trust modernes — mais sa mise en œuvre concrète reste un défi pour de nombreuses organisations. Ce webinar vous montrera comment dépasser les modèles d’accès traditionnels pour adopter une gestion des privilèges plus dynamique et axée sur les risques. Vous découvrirez comment réduire la surface d’attaque en éliminant les privilèges permanents, activer des accès à la demande, et garder un contrôle total sur chaque session privilégiée.

Regardez notre webinar pour apprendre comment :
Éliminer les privilèges permanents, afin de réduire l’exposition aux menaces internes et aux abus d’identifiants.
Mettre en place des accès Just-in-Time, pour que chaque utilisateur n’ait que les droits nécessaires, au bon moment.
Surveiller et enregistrer les sessions privilégiées, afin de garantir la traçabilité et faciliter les audits.
Appliquer le principe du moindre privilège de manière cohérente, dans le cadre d’une stratégie Zero Trust globale.

Le Zero Trust commence ici : Sécurisez les accès privilégiés avec le principe du moindre privilège

La mise en place d'une solution de Gestion et Gouvernance des Identités (IGA) est devenue un enjeu stratégique pour les entreprises de toute taille. Pourtant, initier et structurer un tel projet peut s’avérer parfois complexe.
 
Dans ce webinar, nos experts vous guideront à travers les 10 règles essentielles pour garantir le succès de votre projet IGA. Vous apprendrez à :
·       Maîtriser les fondamentaux d'un projet d'IGA pour une mise en place efficace
·       Anticiper les défis et éviter les pièges que beaucoup d'entreprises ont rencontré
·       Lancer votre projet en toute confiance avec une approche claire et structurée

Les 10 règles pour réussir votre projet de gestion des identités

Active Directory has been the foundation of access management for over 25 years, used by most organizations to control access to resources both on-premises and in the cloud. Over time, IT pros have turned to forums, videos, and online communities to troubleshoot AD issues only to discover that a forgotten configuration from years ago, or a well-meaning shortcut like copying user accounts, can lead to major problems today.
With constant security updates from Microsoft and increasingly complex permission structures, many admins -new and experienced alike - struggle to understand who has access to what and why. This session helps you cut through that complexity and take control of your AD environment.

In this session, Sander Berkouwer and Netwrix Solution Engineer Darryl Baker show how PingCastle, Access Analyzer, and Threat Prevention help admins:
- Quickly and securely assign permissions across the organization
- Equip new admins with clear insights into AD and Entra ID permissions and delegations
- Detect and block unauthorized changes to prevent new security issues

Active Directory Recommended Practices, Part 1: Avoiding and detecting unintended permission changes

Ransomware continues to be one of the most dangerous and financially devastating threats facing organizations today — but it's not just data that's at risk. Ransomware campaigns are increasingly targeting identity systems like Active Directory and Entra ID, seeking to escalate privileges with a goal of complete takeover. Securing identity has become a critical pillar in a modern ransomware defense strategy.
In this webinar, we explore the continuous evolving threat landscape of ransomware, how these attacks unfold, and why identity compromise is often the center of large-scale breaches. We break down the typical ransomware attack chain, highlighting how attackers leverage stolen credentials and Active Directory weaknesses to succeed.
We discuss major ransomware incidents, including wannacry, Revil, and lockbit with real-world examples of the severe impact identity-focused ransomware can cause. We also profile notable threat groups and their tactics to give you actionable insights into how ransomware operations work today compared to just a few years ago.
We finish the session with a live 15-minute demonstration of Netwrix Threat Prevention, showcasing how it can detect ransomware behavior early, identify anomalous activities linked to identity compromise, and automatically take action to contain and stop an attack before it spreads. We also touch on the importance of internal assessments to understand what vulnerabilities potentially lie in your environment.
Security practitioners, junior or senior will all walk away from this sessions with essential strategies to strengthen your defenses, focusing on identity protection as a core component of ransomware resilience.

"Dear Identity": A Ransom Note and Deep Dive into Ransomware Attacks and Proactive Identity Security

Join our comprehensive 60-minute webinar designed to empower IT professionals with the expertise to manage and secure
endpoints using Netwrix Solutions. Dive deep into the technical landscape with a live demonstration that showcases how
Netwrix can streamline your endpoint management processes. Additionally, explore the architectural framework of Netwrix,
revealing how seamless integration can strengthen your existing IT infrastructure. Gain insights into operational best
practices that enhance workflow efficiency and discover sophisticated security features for proactive threat detection
and compliance. Learn how customization options allow scalable solutions tailored to your organization's unique needs.
Don’t miss this chance to elevate your endpoint management strategy with expert guidance and practical insights.

Mastering Endpoint Management with Netwrix

Les fuites de données ne proviennent pas toujours de l’extérieur. Une simple erreur humaine, un collaborateur négligent ou malveillant peut exposer vos données sensibles et compromettre votre conformité réglementaire. Ce webinaire vous montrera comment Netwrix aide les organisations à détecter, bloquer et gérer efficacement les risques internes.
Grâce à une surveillance fine des transferts de données, à un contrôle précis des périphériques et à la centralisation des politiques de sécurité, vous pourrez minimiser les risques sans entraver la productivité.
Ce que vous allez apprendre :
Détection des comportements à risque et des violations potentielles
Contrôle des périphériques USB, des ports et des transferts réseau
Application de politiques de sécurité granulaires sur tous les systèmes d’exploitation
Démonstration en direct des capacités de protection contre les menaces internes
Regardez notre webinaire pour apprendre à reprendre le contrôle de vos données, même face aux risques invisibles venant de l’intérieur.

Données à Risque : Comment Prévenir les Fuites Internes avec Netwrix

Managing identity governance effectively is a critical challenge for organizations balancing cybersecurity, regulatory, and operational needs with budget constraints. Traditional identity governance and administration (IGA) projects often face high costs, lengthy deployment timelines, and complex integrations, making it difficult to achieve security and compliance objectives efficiently.
This CPE accredited webinar will explore practical strategies for modernizing identity governance to reduce total cost of ownership (TCO) while improving security and operational efficiency. Our subject matter experts will discuss and demonstrate how organizations can:
Streamline identity governance processes to accelerate implementation and optimize access controls.
Reduce business disruptions with adaptable workflows that seamlessly integrate into existing environments.
Improve security by minimizing excessive permissions and enforcing robust separation of duties (SoD).
Adopt low-code/no-code solutions to simplify integrations and eliminate costly vendor dependencies.
Watch to gain actionable insights on enhancing identity governance while keeping costs in check, ensuring a more secure and efficient approach to access management.

Identity Governance 101: Reduce Costs & Strengthen Security

The Challenge:
With Microsoft 365 tools like SharePoint, Teams, and OneDrive generating and storing vast amounts of data, organizations face a growing challenge: how to identify where sensitive information resides and who has access to it. Data sprawl and complex permissions can increase the risk of data breaches and compliance violations.

What We’ll Cover in This Live Webinar:
Join us live to explore practical strategies and best practices for securing sensitive data across your Microsoft 365 environment. During the session, we’ll discuss:

- How to automatically discover and classify sensitive data across both cloud and on-premises environments.

- How to use Microsoft Purview sensitivity labels to enforce effective Data Loss Prevention (DLP) policies.

- Techniques to gain visibility into user permissions and reduce excessive or outdated access.

- Implementing Least Privilege Access to minimize risk and strengthen your security posture.

Whether you're in IT, security, or compliance, this session will help you take control of your Microsoft 365 data and protect what matters most.

Data Discovery, Classification, and AI Access Control

Le Shadow IT vous trahit tous les jours. Mais vous ne le voyez pas.

Chaque jour, vos équipes utilisent des applis non sécurisées.

Chaque jour, des anciens employés peuvent accéder à vos données.

Chaque jour, vous êtes exposé.

Et vous ne le saurez… qu’après l’incident.

Réagissez avant qu’il ne soit trop tard.

Regardez notre webinaire exclusif et découvrez comment l’IGA (Identity Governance & Administration) vous permet :

- D’identifier les accès non maîtrisés (même ceux que vous ignorez !)
- De remédier automatiquement aux risques
- De renforcer votre conformité face aux exigences NIS2, RGPD et Zero Trust

IGA vs Shadow IT : Comment reprendre le contrôle de vos accès en 2025 ?

CISOs today are often tasked with solving critical IT challenges while navigating limited resources and tight budgets. Effective identity governance and administration (IGA) is central to achieving cybersecurity success, but traditional IGA projects are often plagued by high costs, lengthy timelines, and steep integration hurdles.
Enter Netwrix Identity Manager, a revolutionary approach to reframing your identity governance strategy. This cutting-edge solution is designed to significantly lower the total cost of ownership (TCO) while ensuring rapid time to value - all without compromising on essential IGA functionality.
Join us for an insightful webinar to learn how Netwrix Identity Manager can transform your IGA strategy by helping you to:
Harness the power of advanced AI and machine learning to dramatically accelerate IGA deployment and continuously optimize your access controls
Reduce business interruptions with adaptable data models and workflows that integrate seamlessly into your organizational processes
Efficiently develop connectors, often without the need for external consultants
Eliminate expensive vendor code reviews through a "low code, no code" approach
Enhance security by minimizing risky excessive permissions with robust separation of duties (SoD)
Discover why Netwrix Identity Manager is recognized as a leader in the IGA market by top analysts and embraced by hundreds of enterprise clients worldwide. Don't miss this opportunity to reframe your identity governance strategy and achieve unparalleled efficiency and security.

Transform Identity Governance to Lower TCO Using Netwrix Identity Manager

Data Loss Prevention encompasses multiple vectors of unwanted data flow but one of the most difficult and persistent is USB drives because of their data capacity, throughput and disconnected nature. 
USB drives (and other forms of removable storage) are even more important in air-gapped and isolated environments, and certain compliance requirements that require data encryption are getting more attention from regulators – especially in the case of CMMC (Cybersecurity Maturity Model Certification).
DLP for USB drives is necessarily endpoint-centric.  And in this technical webinar we will explore what Windows and Mac offers out of the box for encrypting USB drives.  In the case of Windows, we’re talking about Bitlocker and for Macs we’ll compare and contrast APFS Encrypted and FileVault.
For both endpoint OSs we’ll examine:
·       Policy – If and how you can require encryption
·       Key Management – Where are the encryption keys stored and how are they protected? Are they recoverable?
·       Sharing – If and how can you control the sharing of the encrypted device with others inside and outside the organization
·       Revocation/Erasure – Can you revoke access or otherwise wipe out the data on lost devices?
I am discussing how the native technologies in Windows and Mac address these requirements and where they have gaps.

Protecting Data On USB Drives with Windows BitLocker and Mac APFS/FileVault and Beyond

Watch an engaging webinar as we explore the intricacies of embracing the Zero Trust Model, from theory to practice. 
Whether you're a novice or seasoned professional, this session will equip you with expert insights and actionable strategies for embedding Zero Trust principles into your secured identity lifecycle operations. Dive deep into understanding the Zero Trust Model and discover how it can remodel your cybersecurity approach. 

Watch the session to learn how to: 
• Understand the foundational principles of the Zero Trust Model and dispel common misconceptions. 
• Learn strategic approaches to orchestrating technology that align with Zero Trust objectives. 
• Discover essential steps for crafting and implementing a robust Zero Trust plan. 
• Gain insights into achieving major milestones early in your Zero Trust journey.

Unlocking Zero Trust - a blueprint for Secure Identity Lifecycle Operations Part 3

Unlocking Zero Trust - a blueprint for Secure Identity Lifecycle Operations Part 2

Unlocking Zero Trust - a blueprint for Secure Identity Lifecycle Operations Part 1

Lors de cette table ronde animée par Valéry Rieß-Marchive, les experts Jon DiMaggio, d'Analyst1, et Allan Liska, de Recorded Future, partagent leurs analyses sur les importants bouleversements survenus dans l'écosystème cybercriminel mondial au cours des 18 derniers mois.

Table ronde Ransomware : regards croisés sur un écosystème inédit (en anglais)

Cette session explore les types d’attaques les plus fréquentes, les vulnérabilités exploitées, et comment la cyberassurance Stoïk a joué un rôle clé dans la remédiation et la résilience des organisations touchées.

Expert session : 300 incidents, 0 panique : dans les coulisses du CERT-Stoïk

Cybermalveillance.gouv.fr a pour missions d’assister les particuliers, les entreprises, les associations, les collectivités et les administrations victimes de cybermalveillance, de les sensibiliser au risque cyber, de les informer sur les menaces numériques et les moyens de s'en protéger. Jérôme Nolin, Directeur général de ce groupe d'intérêt public revient pour nous sur les points clés du rapport d'activité 2024 et donnera les tendances au 1er semestre 2025 concernant les entreprises.

Expert session : Des violations de données personnelles de plus en plus massives dans les organisation

Dans un contexte de menaces cyber sans précédent et de développement rapide de nouvelles techniques d’attaque, comment faire pour assurer la performance de votre entreprise en toute circonstance ?

Minimum viable company : votre entreprise est elle prête ?

L'année 2024 et le début de l'année 2025 ont été marqués par d'importants mouvements aillant conduit à la chute de grandes enseignes cybercriminelles et à l'apparition d'une multitude de plus modestes boutiques. Un environnement décomposé dont les signes de consolidation se font attendre. Sans que cela ne soit une bonne nouvelle pour les entreprises.

Keynote session : Ransomware, paysage totalement décomposé

Ransomware : Etat de la menace en 2025

Active Directory est constamment attaqué, avec 95 millions de comptes ciblés quotidiennement. Les menaces basées sur l'identité permettent aux attaquants de se déplacer latéralement, d'élever les privilèges et de compromettre vos systèmes critiques. Les outils traditionnels ne suffisent pas à les arrêter.

Découvrez comment nos solutions sécurisent votre AD hybride de bout en bout, de l'identification des vulnérabilités à la détection des menaces, en passant par l'automatisation des réponses et la récupération rapide en cas d'incident.

Ce que vous allez apprendre :

Regarder
1) Pourquoi Active Directory est une cible de premier plan et comment les attaquants l'exploitent.
2) Comment Netwrix détecte et contient les menaces basées sur l'identité en temps réel.
3) Les avantages d'une réponse automatisée et d'une récupération rapide.
4) Bonnes pratiques pour protéger votre environnement AD.

Regardez dès maintenant notre webinar et reprenez le contrôle de la sécurité de votre Active Directory !

Maîtrisez la sécurité de l’Active Directory : détectez, répondez, récupérez

Cyber Security

IT Security

Information Security

Cyber Attacks

AD Security

ITDR

Compliance

PingCastle

Active Directory

Security

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

Increasing expectations for good governance, effective risk management and complex demands for corporate compliance are presenting a growing challenge for organizations of all sizes. Join industry thought leaders as they provide you with practical advice on how to implement successful risk and compliance management strategies across your organization. Browse risk management resources in the form of interactive webinars and videos and ask questions of expert GRC professionals.

IT Governance, Risk and Compliance

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Maîtrisez la sécurité de l’Active Directory : détectez, répondez, récupérez

Presented by

About this talk

Netwrix