Name: Panel: Hybrid AD Security
Start: 2020-10-21T19:30:00Z
End: 2020-10-21T19:30:58.000Z
Location: BrightTALK
Rating: 5

Semperis is the pioneer of identity-driven cyber resilience for cross-cloud and hybrid environments. The company provides cyber preparedness, incident response, and disaster recovery solutions for enterprise directory services—the keys to the kingdom. Semperis’ patented technology for Microsoft Active Directory protects over 40 million identities from cyberattacks, data breaches, and operational errors. Semperis is headquartered in New York City and operates internationally, with its research and development team distributed between San Francisco and Tel Aviv.

Semperis hosts the award-winning Hybrid Identity Protection conference. The company has received the highest level of industry accolades; most recently being named Best Business Continuity / Disaster Recovery Solution by SC Magazine’s 2020 Trust Awards. Semperis is accredited by Microsoft and recognized by Gartner.

Join our next HIP Conference: https://bit.ly/3q6JUbD

We all know that ransomware is everywhere and not going away any time soon. Many organizations – from government entities to regulatory bodies and even cybersecurity experts – have provided recommendations, requirements, and mandates to help you protect your organization from the relentless pace of attacks. But making this guidance real is much easier said than done. It all comes down to the basics but many of us may be unsure of what those basics actually are and how to implement them. In this webinar we will discuss the NIST Cybersecurity Framework for Ransomware Risk Management with a specific focus on:
What the guidance includes
How this guidance compares to other options
How to detect where your program falls short
Actionable advice on where to start and which actions will yield the most benefit (hint: you should start with Active Directory)
Sign up today to learn how you can dramatically improve your security stance in the face of ransomware.

A Practical Guide to Following the NIST Framework for Ransomware Risk Management

As cyberattacks proliferate, many organizations are investing resources in plugging holes in their security strategy. But one common attack entry point—also used in the SolarWinds breach—is consistently overlooked: Active Directory. According to results from a new security assessment tool that evaluates security weaknesses in Active Directory configurations, even large organizations with extensive resources are seeing average scores of 58%—a failing grade.

Where are companies failing in securing Active Directory—and how can you strengthen your AD defenses? Join Microsoft identity experts Darren Mar-Elia and Ran Harel as they walk through the most common weak spots in Active Directory configurations—and how to fix them.
You’ll come away from this session with a practical checklist of AD vulnerabilities to watch for in your environment, including:

- Password policies that are inadequate for modern account protection
- Accounts with elevated privileges in place that haven’t been adequately reviewed
- Accounts with delegated permissions over Active Directory that have unwanted consequences on AD security that have proliferated over time
- Weaknesses in Kerberos usage that are increasingly being exploited to gain privileged access
- Weak Group Policy configuration, which creates a variety of holes that attackers can drive through

Would Your Organization Fail the Active Directory Security Assessment?

Disaster Recovery (DR) strategies have traditionally focused on natural disasters, then expanded into other physical events such as terrorism. Today, cyber weaponization is everywhere, and the "extinction event" is a genuine threat with no respect for geographic boundaries. 
 
Join to learn how how to quickly recover critical business operations following a ransomware attack. 
 
Presented by 15-time Microsoft MVP and identity security expert Sean Deuby (Semperis Director of Client Services), this session will cover: 
 
• Recent cyberattacks that have targeted Active Directory, which is the primary source of identity and access trust for 90% of enterprises 
• Why AD is the cyber kill chain’s weakest link – exploited in virtually every modern attack 
• New “cyber-first” DR technologies automate recovery of complex systems, facilitate recovery to the cloud, and eliminate the risk of reinfection from system state and bare-metal backups.

Ransomware, Risk and Recovery

In this panel discussion, leading experts from the identity security space will share their insight and experience helping real-world organizations secure hybrid environments, which are prime targets for increasingly common cyberattacks that compromise on-premises systems, then move to the cloud—or vice versa.

Learn how to combat the latest threats, close common hybrid identity security gaps, and establish the most effective cyber resilience program for both your legacy on-premises and expanding cloud environments.

Panel: Defending Hybrid Identity Environments Against  Cyberattacks

Considering passwordless but not certain if this is something your organization is ready to tackle? This talk may or may not convince you either way but what you will learn about is the real-world story of the multi-
year journey to do just that for a large organization (>500K employees). This talk will serve as a continuation of the talk from HIP 2020 but will provide enough of the back story for those who might be joining just now. We show the previous plan, what we achieved, the hard lessons learned along the way, and what we must complete before September 2022 to meet our goal of eliminating passwords completely for at least 90% of employees. The talk will address passwordless technologies but will also cover some broader business problems like getting leadership buy-in and navigating employees through the change journey.

Taking a Large Organization Passwordless: Completing the Journey

Access and security start with identities and their credentials. Therefore, in this presentation we will take a look under the hood of Azure Active Directory Connect, what the impact is during cross-forest AD 
migrations and how to provision identities to on-premises systems from Azure AD. If you wanted to learn more about the core of identity synchronizations, this is the session to watch.

It’s Raining Identities: The Impact of Azure AD in AD  Migrations

EDR solution makers are evolving into XDR, and XDR is coming for your Identity -- and that's a good thing. XDR (eXtended Detection and Response) solutions are expanding their capabilities to take Identity-related 
response actions when other kinds of compromise (malware infection, for instance) are detected. In this session, we'll look at XDR from an Identity Security practitioner's perspective and predict the future of XDR and Identity. This talk is intended to be useful to Identity Security practitioners of all levels.

XDR Is Coming for Your Identity - And That’s a Good Thing

Identity is a core tenant of trust we leverage in our environments and this concept extends to cloud environments as well. With a public cloud platform, the cloud service provider (CSP) — whether 
Microsoft, Amazon, Google, or another organization — is responsible for the physical security of the infrastructure and for keeping customers’ data separated. At the same time, the companies using those cloud services are responsible for the security of their data and applications, operating systems, 
and identity and access management. The cloud platform might come with security solutions, but the customer organization is responsible for configuring those solutions and ensuring that they are working effectively. In this session, we will review the types of threats and attacks we are facing in deployments we manage today and how attacker tactics are changing as they target cloud infrastructure. We will review some example threats to highlight the considerations and questions organizations should be asking themself. We will then teach you how to leverage the Security Stack mapping research to help you identify and implement native security controls in the cloud to effectively manage the modern threats we face today.

How Has the Threat Landscape Changed as We Transition to  Cloud Environments?

Active Directory security gaps can lurk in various areas, including Kerberos and Group Policy settings. But one of the most challenging categories is account security: According to a recent survey of users of Purple Knight (a free security assessment tool built by Semperis identity experts), organizations have the lowest scores (the highest number of security indicators) in this category. In this session, Alexandra Weaver (Semperis Solutions Architect) and Sean Deuby (Semperis Director of Services) will highlight the top 5 risky account security configurations—such as Admin accounts with old passwords, changes in privileged group membership, and enabled but inactive admin accounts—and how to fix them.

Top 5 Risky Account Security Configurations

Many organizations have Active Directory implementations that are old enough to have graduated high school. Throughout the lifetimes of these Active Directory implementations, successive administrators have 
made configuration changes that may have solved immediate problems, but also inadvertently introduced security vulnerabilities. If you've inherited an Active Directory instance that one or more predecessors have managed, it's likely that you're unaware of these security misconfigurations unless you've deliberately gone searching for them. In this session, you'll learn about common Active Directory misconfigurations, the security implications of those misconfigurations, and the steps you can take to mitigate them.

Common Active Directory Misconfigurations

Ransomware attacks are as common as having a cup of coffee. 
It's not "if attacked..." but rather "when attacked...", and with that in mind, 
the only "insurance" available is to be prepared and have a written and 
tested Disaster Recovery (DR) plan with supporting tooling! Do you have such 
a DR plan? Have you ever tested your backups?

In this session, Jorge will discuss thoughts, mistakes, options, things to 
think about, and steps that are interesting for you when writing a DR 
plan.

Resurrecting After a Ransomware Attack - Be Secure, And Prepared!

Privileged identities but also DevOps pipelines with privileged access needs particular attention in a cloud environment. Over the last years Microsoft releases many design principles, best practices, and security 
concepts for securing privileged access in Microsoft Azure. This includes the new "Enterprise Access Model" (as evolution from the AD tier model) but also best practices from the Cloud Adoption Framework (CAF) to design identity and access for Azure workloads and management. In my session I will speak 
about security considerations and solution approaches from my research work. Which key points should be included in designing a secure foundation for privileged identities? How can I prevent privilege escalation by 
implementing a well-designed and delegated Azure RBAC model? Which aspects should be considered in securing privileged Azure DevOps release pipelines?

Protect Your Privileged Identities and DevOps Pipelines In  Microsoft Azure!

Identity and security management functions have typically been 
siloed in many organizations. But with the rise in cyberattacks targeting 
identity systems as an initial or secondary attack vector, security and 
technology leaders are looking at ways to foster collaboration between these 
two groups. According to the Identity Defined Security Alliance (IDSA) 
report 2021 Trends in Securing Digital Identities, 64% of organizations 
surveyed have made changes to better align security and identity functions 
within the last two years.

Join industry leaders as they discuss the challenges that siloed teams face 
from a security perspective and how organizations are taking steps to align 
security and identity functions to improve overall security posture.

Panel: Uniting Identity and Security Teams Against the Adversaries

The attack paths into AD are numerous. AD itself is complex 
and usually outstrips the ability of IT administrators to fully protect it. But 
there are key things you can do to reduce its attack surface, that don't 
require a lot of headaches and change tickets. In this session, Darren will 
highlight the best of these and talk about what kinds of things attackers are 
typically looking for when they try to exploit AD.

Practical Tips for Protecting Active Directory

As weak, stolen, and cracked passwords are at the root of 80% of cybersecurity incidents, Passwordless has the potential to change the world. Under the covers, Windows Hello for Business, Microsoft's 
Passwordless solution, has already changed the authentication paradigm for Active Directory. Regardless of the device being domain-joined, hybrid Azure AD-joined or Azure AD-joined, you can access organizational resources without specifying credentials. In this session, Sander Berkouwer, 13-time Microsoft MVP, explains how Windows Hello works in all three scenarios and what you need to get it going for your organization.

Windows Hello for Business Hybrid Access: How Does It  Work Under the Covers?

How can organizations foster a diverse and inclusive culture in the cybersecurity community? Simon Hodgkinson, Former bp Chief Information Security Officer (CISO), chats with Emma Leith, European CISO at Santander about her experience in creating a culture within cybersecurity organizations that allows diversity to flourish. They’ll discuss common barriers related to inclusion—and Emma’s own experiences—as well as the current state of DEI initiatives in the cybersecurity industry. They’ll include some practical steps organizations can take to embrace a mix of perspectives to improve their offerings and foster meaningful connections in the cybersecurity industry.

Diversity in CyberTech and the Importance of Cultivating an Inclusive Culture

In this conversational chat, Denis Ontiveros Merlo and Sean Deuby discuss how organizations can “set data free” in a secure manner. Despite investment in Identity, we still have significant security breaches and 
friction when attempting to drive a sustainable identity culture given competing priorities and view on value. This presentation will present some examples of anti-patterns to consider when tackling some very visible 
operational identity issues and will attempt to provoke critical thinking to understand whether the identity profession is designing products that really drive the right user behavior. As we use behavioral economics and heuristics —the use of rules of thumb or mental shortcuts to make a quick decision—are we not focusing on the wrong problems and reinforcing our cognitive bias?

Fireside Chat: Scaling Identity for the Future - Enterprise Perspective

How many times have you been asked to prove your identity to different organizations? You may have had to provide copies of a passport, a bank statement, a utility bill or appear in person. How would it be if you 
could prove who you are once and then use that proof across multiple service providers? Welcome to the world of Verifiable Credentials (VCs). 
 
In this session, John Craddock will introduce you to VCs and show you how to issue your own VCs using the Azure AD Verifiable Credentials service. Could this be your steppingstones into a whole new world?

Keynote: Will Decentralized Identities and VCs Become the Future of Identity?

Sean Deuby, host of HIP podcast, sits down with industry experts and a special guest, Julie Smith.

Julie Smith is the Executive Director of the IDSA, responsible for executing the mission on behalf of the membership and the identity and security community.  Throughout her career she has held various leadership roles in technology and solutions companies, including product management, product and solutions marketing and business development. Prior to joining the IDSA, Julie spent 12 years in the identity and security industry with leading vendors and solution providers.  

Siddharth Bhai is a Product Management Lead at Google Cloud. His current focus is to provide product leadership for managed security services, which streamline customer deployments and enable enterprises to focus on the best public clouds have to offer. He has been active in the Identity & Access Management space for over a decade and enjoys working with many Fortune 1000 & emerging companies. He has spoken about Identity & Access Management at major industry conferences, including Directory Experts Conference, Microsoft TechEd, and Google Cloud Next.

Gil Kirkpatrick is the Chief Architect at Semperis. Gil has been building commercial products for enterprise IT for a very long time, focusing primarily on identity management and security-related products. He has been named a Microsoft MVP for Active Directory and Enterprise Mobility for each of the last 15 years, and is the author of Active Directory Programming, as well as the founder of the Directory Experts Conference. 

Host: Sean Deuby, 15-time Microsoft MVP and HIP Podcast Host. Sean brings 30 years’ experience in Enterprise IT and Hybrid Identity to his role as Director of Services at Semperis. An original architect and technical leader of Intel's Active Directory, Texas Instrument’s Windows NT network, and 15-time MVP alumnus, Sean has been involved with Microsoft identity technology since its inception.

Panel: Future Proofing Identity Security

Recently, the industry has been moving away from using passwords since it is known to be the main cause for many security breaches. One of the best Passwordless solutions right now is FIDO2 authentication (called WebAuthn). WebAuthn is based on PKI (Public Key Infrastructure) cryptography technology to be simple, convenient and secure, and proven to be the most effective against phishing attacks. However, as FIDO tries to satisfy conflicting issues such as privacy protection vs maximum security, some FIDO2 features need to be improved for enterprise deployment and use. For example, many enterprises dealing with sensitive data need to ensure the FIDO authenticator is under the enterprise’s total management. In this talk, we present several critical enterprise issues including (1) enterprise attestation, (2) secure firmware control, (3) extended ROE (Restricted Operation Environment) and (4) biometric template integrity monitoring, and our new FIDO authenticator provisioning solution from holistic security approach. 

Stephen Oh is the founder and CEO of eWBM and TrustKey Solutions. eWBM is a fabless semiconductor company specialized in secure MCU (Microprocessor) and TrustKey provides passwordless login as well as revolutionary new IoT device provision solutions called Holistic Security Platform (HSP). eWBM’s secure MS500 is used for a variety of IoT and security applications including FIDO2 external authenticator for TrustKey Solutions, LoRa module, and Industrial IoT devices. Before founding eWBM in 2009, he was a vice president of Samsung Electronics, SLSI Business Unit, where his responsibility is AP (Application Processor) development and business. He was also involved with Gigabit Ethernet Standard (IEEE802.3ab) and ADSL standard (T1.413) while he was with National Semiconductor and Texas Instruments. He received his PhD/MSEE/BSEE from Purdue University.

[CPE Credits] You are eligible for CPE Credits. Download your Viewing Certificate from BrightTALK.

New FIDO Authenticator Provisioning Solution for Enterprises

Microsoft Active Directory is still the standard for authentication, authorization, and auditing of users, groups, and applications in Windows environments. In a multi-cloud world, well-configured access policies are more important than ever. How do you leverage the best of what Google Cloud has to offer while working with the realities of your current AD setup? 

Siddharth Bhai is a Product Management Lead at Google Cloud. His current focus is to provide product leadership for managed security services, which streamline customer deployments and enable enterprises to focus on the best public clouds have to offer. He has been active in the Identity & Access Management space for over a decade and enjoys working with many Fortune 1000 & emerging companies. He has spoken about Identity & Access Management at major industry conferences, including Directory Experts Conference, Microsoft TechEd, and Google Cloud Next. He loves connecting with industry professionals, during and outside of conference sessions. 

[CPE Credits] You are eligible for CPE Credits at some professional associations. Upon viewing the entire webinar, download your Viewing Certificate from BrightTALK.

Get the Most Out of Your Active Directory and Google Cloud

Use the cloud, they say. So why don’t we just get rid of our on-prem AD and move everything to the cloud? Especially those computer accounts – should be easy. Ah … your app still needs that drive-letter mounted to your ancient file-service … and simply won’t start after installing the cumbersomely packaged app on a computer that is joined to your Azure-domain? Your user-settings are gone? Sorry … But at least OneDrive is easy to deploy and utilize – basically just enable it for all users … solves all storage problems on its own … until you use it with virtualized clients.  Sound familiar?  In this session, Guido will discuss the challenges most customers face when moving classic on-prem workplace services to the cloud, and how to solve them by properly combining the best of both worlds. 

Guido Grillenmeier is a Chief Technologist within the Enterprise Services Group at DXC Technology, a company formed in 2017 from the Enterprise Services division of HPE and CSC. Based in Germany, Guido deals primarily with global Windows infrastructure deployments for large enterprise customers and has helped various customers to secure their Active Directory. Guido has often spoken at various technology conferences, including the original NetPro’s Directory Experts Conference (DEC), later called Quest Technical Experts Conference (TEC). He has also been a speaker at various other Microsoft-technology related conferences, such as Microsoft Tech-ED, IT Forum or Windows Connections. In his HP-days, he was part of the Advanced Technology Group and in this role has led the development and delivery for HP's Windows Server 2008 Academies to HP’s own Services division. Guido has been a Microsoft MVP for Directory Services for 11 years. Besides writing articles for technical magazines, Guido is also the co-author of “Microsoft Windows Security Fundamentals” (Digital Press).

You are eligible for CPE Credits at some professional associations.

Navigating a Hybrid World from a Device Management Perspective

Come on a journey in emerging tech and start planning a secure tech future. AI/ML, 5G, 6G, Chemical Printing, 4D Printing and designing a post-quantum world. Learn why it’s so important to fix our endless loop of cybersecurity now, or it won’t be 2020 that kills us but the dangerous tech.

Chris Kubecka is the founder and CEO of HypaSec offering nation-state incident management, ethical hacking training in IT, IOT, ICS SCADA and expert advisory services to governments. Prior to HypaSec, she headed the Information Protection Group and international intelligence for the Aramco family. Re-establishing international business operations, helping to stabilize the oil market and implementing digital security after the company suffered from the world’s most devastating Shamoon cyberwarfare attacks which wiped out 85% of computer systems and over 35,000 Windows systems which deeply affected the countries of Saudi Arabia, Qatar and Bahrain. At Unisys, she helped halt the July 2009 second wave cyberwarfare attacks against South Korea during her time advising the company’s flagship customers Danone and Lloyds TSB. A USAF veteran, serving her country both as a military aviator and handling command and control systems for Space Command. Beginning her computer career at the age of five coding but was restricted from using computer systems from the age of ten until eighteen after hacking into the DOJ. Chris combines highly technical skills,  ethical hacking, OSINT, strategy, leadership and governance expertise. Presenting at Europol, Interpol, national police, EU/NATO cyberwarfare exercises, DefCon, Black Hat, United Nations, Oxford, Cambridge, OWASP and BSides globally. Author of several technical, engineering and management courses and books Down the Rabbit Hole An OSINT Journey, Hack the World with OSINT and her upcoming book Hack the Galaxy with OSINT.

[CPE Credits] You are eligible for CPE Credits. Download your Viewing Certificate from BrightTALK.

Securing the Future Now

Join the host David Raviv as he sits down with industry experts and a special guest, Wim van den Heijkant.

Special Guest: 
Wim van den Heijkant is Co-Founder and Security Consultant at Fortigi and is passionate about Identity & Security. He has worked with clients in Fortune 500 companies and small start-ups across various industries ranging from financial services to critical infrastructure and government.  Wim oversaw projects from design to implementation and aftercare in roles as an engineer, developer, architect, and recently CISCO. He's the founder of several IT companies and loves to coach young and eager IT consultants. 

Chris Roberts is Hacker in Residence at Semperis and is considered one of the world’s foremost experts on counter threat intelligence. With increasingly sophisticated attacks on targets of opportunity, Roberts’ unique methods of addressing the evolving threat matrix and experience with all information systems make him an indispensable partner to clients and industries that demand protection of financials, intellectual property, customer data, and other protected information from attack.

Host: 
David Raviv is a Senior Technical Account Manager at Semperis. He began his career as an unmanned airplane pilot and officer in the Israeli Air force (IAF), and has worked at various startups including Proofpoint Inc., Optiv, and HYPR providing business and technical sales expertise. Along with passion for enterprise cyber technology and startups, he loves anything that comes with a remote control. 

In 2013, David founded the New York Information Security Meetup, the largest independent security group in the country hosting over 95 live events in NYC. The group now has over 5500 active members. In November 2019 David co-founded the cyber guild a non-for-profit 503C organization to promote work-force in Cyber Security.

Panel: Hacking Identity Security

How do you defend Active Directory, aka the “keys to the kingdom,” if you don’t know where the attacks are coming from? Hackers constantly find new ways to break into AD. In this workshop, we’ll demonstrate real-world attacks that are frequently used against AD, including credential theft, Kerberos-based attacks, Group Policy-based attacks, and ACL attacks. The expert presenters will play out both perspectives: attacker and defender. This is a red vs. blue standoff, so don’t expect a bunch of slideware.
 
During this workshop, we will demonstrate:
-Ways that hackers can exploit AD in every stage of the cyber kill chain
-Common AD hacking and discovery tools such as Mimikatz, PowerSploit, and BloodHound 
-Proactive steps to identify vulnerabilities in your AD configuration 
-Strategies to harden your AD so that hackers don’t have an easy path to Domain Admins 

Attacker: 
Andy Robbins is an active red teamer, Technical Architect at SpecterOpsan and co-author of BloodHound, a tool designed to reveal the hidden and unintended permission relationships in Active Directory domains. He has performed numerous red team operations and penetration tests against banks, credit unions, health-care providers, defense companies, and other Fortune 500 companies across the world. He has presented at DEF CON, BSides Las Vegas, DerbyCon, ekoparty, and actively researches Active Directory security. He is also a veteran Black Hat trainer.
 
Defender: 
Darren Mar-Elia, VP of Product at Semperis. A 14-year Cloud and Datacenter Microsoft MVP, Darren has a wealth of experience in Identity and Access Management and was the CTO and founder of SDM software, a provider of Microsoft systems management solutions. 

[CPE Credits] You are eligible for CPE Credits. Download your Viewing Certificate from BrightTALK.

Speakers: 
Andy Robbins, Technical Architect, SpecterOps &Co-Creator, BloodHound
Darren Mar-Elia, VP of Product, Semperis

Attacking and Defending AD Workshop

What started as a sleepy technology for efficiently configuring 1000s of Windows desktops and servers, has now become a gold mine for attackers looking to expose your security posture and leverage your GPOs as “malware delivery vehicles”.

In this session, Darren Mar-Elia (the “GPOGUY”) will summarize the nearly 4 years of research he’s done on the various ways attackers are exploiting GP. More importantly, he will break down the key steps you can take to defend your Group Policy environment, and therefore your Windows environment, from abuse.

During this workshop, we’ll demonstrate:

-How attackers use Group Policy for reconnaissance
-How attackers use Group Policy as a vector for malware
-How you can configure your AD and GPOs to prevent abuse
-Best practices for managing Group Policy with security in mind

A 14-year Cloud and Datacenter Microsoft MVP, Darren Mar-Elia has a wealth of experience in Identity and Access Management and was the CTO and founder of SDM software, a provider of Microsoft systems management solutions. Prior to launching SDM, Darren held senior infrastructure architecture roles in Fortune 500 companies and was also the CTO of Quest Software. As a Microsoft MVP, Darren has contributed to numerous publications on Windows networks, Active Directory and Group Policy, and was a Contributing Editor for Windows IT Pro Magazine for 20 years.

[CPE Credits] You are eligible for CPE Credits at some professional associations. Upon viewing the entire webinar, download your Viewing Certificate from BrightTALK.

Windows Group Policy: Powerful Configuration Tool or Hacker’s Best Friend?

The recent “hack” at the SANS Institute shows that Azure AD conditional access doesn’t protect you against all form of authentication. This presentation explores all the less known ways to authenticate and access resources protected by Azure AD. I will demonstrate how conditional access was bypassed as well as what you can do to monitor and restrict this kind of access. 

Wim van den Heijkant is Co-Founder and Security Consultant at Fortigi and is passionate about Identity & Security. He has worked with clients in Fortune 500 companies and small start-ups across various industries ranging from financial services to critical infrastructure and government.  Wim oversaw projects from design to implementation and aftercare in roles as an engineer, developer, architect, and recently CISCO. He's the founder of several IT companies and loves to coach young and eager IT consultants. 

[CPE Credits] You are eligible for CPE Credits at some professional associations. Upon viewing the entire webinar, download your Viewing Certificate from BrightTALK.

Bypassing Azure AD Conditional Access

Stealing Identities Throughout The Ages… How Your Adversaries, Attackers and Nemeses Continue to Chase the Elusive Prize.

The cybersecurity industry is not at a loss when it comes to cheesy castle analogies or quoting Sun Tzu whenever it gets the chance (keys to the kingdom, crown jewels, the art of war), you name it we’ve butchered it. But what if we took some time to look at the whole medieval warfare a little differently, ARE there actually lessons we CAN learn from all those who’ve gone before? Do we have something to use today that was true on the battlefield of yesteryear?    

I'd argue that taking some time to studying the techniques used by the Vikings, Mongols, Huns, and so on IS something we want to do. From an adversarial perspective, as well as those charged with defending the enterprise and those most prized digital assets, we CAN learn something from our hairy war-mongering ancestors. 

We'll attempt to chat about new and emerging cyberattacks without actually talking about ""cyber"" at all. We'll be making parallels between the Medieval world and our own to learn something, hopefully. Or, at the very least we’ll end up working out how far we can throw a Cisco or Palo Alto firewall with a trebuchet. 

Chris Roberts is Hacker in Residence at Semperis and is considered one of the world’s foremost experts on counter threat intelligence. With increasingly sophisticated attacks on targets of opportunity, Roberts’ unique methods of addressing the evolving threat matrix and experience with all information systems make him an indispensable partner to clients and industries that demand protection of financials, intellectual property, customer data, and other protected information from attack.

[CPE Credits] By attending this webinar, you are eligible for CPE Credits at some professional associations. Upon viewing the entire webinar, download your Viewing Certificate from BrightTALK which you can find on the right-hand side of the page.

Stealing Identities throughout the Ages

Today’s malware is stealthy, sophisticated, and can wreak havoc on your network. But most malware relies on a core set of tools and libraries that get the malware in the door, allow it to persist, gather credentials, move laterally through your network, and ultimately steal your data or encrypt your servers. Learn how these tools work, the APIs they use, and the sorts of vulnerabilities they exploit so you can be better armed in your battle against the bad guys.

Gil Kirkpatrick is the Chief Architect for products at Semperis, a leading provider of cyber preparedness, incident response, and disaster recovery solutions for enterprise directory services on-premises and in the cloud. Gil has been building commercial products for enterprise IT for a very long time, focusing primarily on identity management and security-related products. He has been named a Microsoft MVP for Active Directory and Enterprise Mobility for each of the last 15 years, and is the author of Active Directory Programming, as well as the founder of the Directory Experts Conference. At Semperis Gil builds products to prevent, detect, and recover from cyber-attacks on enterprise hybrid identity environments. Gil speaks on cyber-security, identity, and disaster recovery topics at IT conferences around the world.  

[CPE Credits] You are eligible for CPE Credits at some professional associations. Upon viewing the entire webinar, download your Viewing Certificate from BrightTALK.

Malware Mechanics: Understanding What You’re Defending Against

By now we've all heard about the security and usability benefits of the passwordless authentication future. We've heard about technologies that support passwordless authentication such as Windows Hello for Business, FIDO2, and device sign-in for the Microsoft Authenticator App. How would you go about actually taking your organization passwordless? In this session, we will go on a journey to discover how one large (.5M users) hybrid organization is doing just that. We will cover the technologies at a high level but focus more on the overall approach and the change management journey as we seek to fundamentally change how all of our users access their technology. We also will discuss the challenges around having passwords side-by-side with passwordless options and how we actually plan to eventually take passwords away completely once we really no longer need them. 

Joe Kaplan is the Architecture and Strategy lead for Accenture's Identity and Access Management organization within internal IT. He focuses on solving real-world identity problems for a large, complex business. Joe is the co-author of the "".NET Developer’s Guide to Directory Services Programming"" and is a former Microsoft MVP in Enterprise Mobility + Security. 

[CPE Credits] You are eligible for CPE Credits at some professional associations. Upon viewing the entire webinar, download your Viewing Certificate from BrightTALK.

Taking a Large Organization Passwordless

Join this session to see how you can provide secure access to your legacy applications, streamline, and modernize access to applications that support legacy authentication including Kerberos, Header based, and other protocols for your users and guests in Azure AD. This session will show you how to provide access to (on-premises) applications using Azure AD authentication, supporting FIDO2/WHfB/MFA/etc to provide increased security and a better end-user experience.

Roelf Zomerman is a Microsoft Cloud Solution Architect, specialized in the architecture of complex solutions in Azure with an eye for hybrid solutions related to identities. 

[CPE Credits] You are eligible for CPE Credits at some professional associations. Upon viewing the entire webinar, download your Viewing Certificate from BrightTALK.

Securing Your Legacy Apps with Cloud Identities

Active Directory (AD) has been around for about two decades, and many organizations started using it as soon as it became available. Large organizations especially use Identity Management systems to manage the lifecycle of identities (user accounts, service accounts, computer accounts, and other account purposes). AD has evolved and with every new release of the OS, it became more secure. However, that does not mean you are automatically using all of the most secure account settings. It also does not mean you automatically stopped using the least secure account settings. What about passwords? Are your users using weak or compromised passwords, and how do you know? Do users own multiple accounts and are they sharing passwords across accounts they own, and how do you know? Weak settings and passwords (i.e. bad account hygiene) are what the bad guys need in order to take over your systems, accounts, and ultimately your AD through e.g. ""lateral movement"". Even with large organizations and with well-managed ADs, you'll be surprised by what you will see when you dig in. Although the best option is to go passwordless, or at least decrease password usage, that may not be a viable option for all organizations. So what can you do about all of this? 
Please join Jorge in this session where he will explain what can be done from a technical and process perspective. 

Jorge de Almeida Pinto is a Lead Identity/Security Consultant working for IAMTEC with a very strong focus on and passion for Microsoft Identity, Security & Access Management technologies, either on-premises or cloud-based. He helps and guides organizations in architecting, designing, implementing, and maintaining secure solutions with a critical, positive, and goal-achieving mindset. He has received the Microsoft MVP Award every year since 2006.

[CPE Credits] You are eligible for CPE Credits at some professional associations. Upon viewing the entire webinar, download your Viewing Certificate from BrightTALK.

Account Hygiene: Fixing the Bad for the Good!

Attackers love silo’ed thinking – vendor A *or* vendor b, on prem *or* cloud, security *or* productivity, as the strategy gaps that emerge provide perfect entry points into their targets. In this talk, we’ll look at how current attacks exploit the gaps, then look at how overlapped *and* strategies can disrupt attackers, reduce costs, and improve user experiences in your real world, multi-faceted deployments. The presentation will be followed by a fireside chat moderated by Sean Deuby, Director of Services at Semperis and host Hybrid Identity Protection Podcast.

Alex is the Director of Identity Security at Microsoft. Billions of users sign in to millions of apps almost 20B times a day on our identity platform; the Identity Security team protects them from unauthorized access, account takeover, and abuse. If you have signed into Xbox, Skype, Outlook, Office 365, Azure, any number of our B2C sites or organizations using Azure AD, we’re the team standing between you and the hackers. In addition to detection, investigation, and response, ISP delivers Azure AD Identity Protection, Conditional Access, Multi-Factor-Authentication, and the Microsoft Authenticator app, as well as a host of enterprise and consumer account defense systems. Prior to his current role, Alex previously served in a variety of engineering and product management roles on products such as MSN, Visual Studio, Xbox, and Identity-related products like AD and FIM. Outside of work, Alex is passionate about interfacing with various humans, making stuff, sailing, and music.

[CPE Credits] By attending this webinar, you are eligible for CPE Credits at some professional associations. Upon viewing the entire webinar, download your Viewing Certificate from BrightTALK which you can find on the right-hand side of the page.

Staying Grounded on Security with Your Head in the Clouds

Andy Greenberg discusses SANDWORM and answers questions on the latest news to come out from the DOJ on the hackers behind NotPetya with Sean Deuby.

More on Sandworm:
Playing out like a sci-fi thriller, Sandworm tells the true story of the desperate hunt to identify and track the highly skilled hacking group responsible for carrying out NotPetya – a cyberattack that cost more than $10 billion in total destruction.

Q&A with Andy Greenberg, author of SANDWORM

Join Sean Deuby as he sits down with industry experts and a special guest, Jules Okafor. 

Juliet Okafor, J.D., is the CEO of RevolutionCyber and a Cybersecurity professional who has combined her knowledge of the legal system and Cybersecurity solution models into success stories across Fortune 500 industries throughout the USA. A passionate security solutions visionary and strategist, Juliet determines how to solve the company’s problem, be it vulnerability management, incident response or reducing the risk associated with technology or vendors, and then puts a plan into action. Juliet graduated from UMassAmherst with a B.A. in Communication, Fordham University with an M.A. in Public Communication and Media Studies and received her JD from Temple University.

Kat Sweet secures the securers. She currently works on the product strategy team of Linux security startup Capsule8 as a technical evangelist. Previously, she was a security analyst at Duo Security, building out their multifaceted security operations program and hand-crafting many puns about zero trust. She keynoted the inaugural DevSecOps Days Austin and has spoken at several security conferences including LASCON, BSidesLV, CircleCityCon, and a handful of DEF CON villages, in addition to serving on the staff of BSidesLV since 2017. When she’s not in security mode you can find her bursting into song, picking unsuspecting locks, or dangling upside down.

Guido Grillenmeier is a Chief Technologist within the Enterprise Services Group at DXC Technology. Based in Germany, Guido deals primarily with global Windows infrastructure deployments for large enterprise customers and has helped various customers to secure their Active Directory. 

Sean Deuby, 15-time Microsoft MVP and HIP Podcast Host and Director of Services at Semperis. An original architect and technical leader of Intel's Active Directory, Texas Instrument’s Windows NT network, and has been involved with Microsoft identity technology since its inception.

Panel: Crisis Management

The Microsoft documentation provides clear-cut decisive guidance for integrating Active Directory with Azure AD. This way, Hybrid Identity should emerge. Alas, at some organizations it didn't. Join this session to gain insights into the critical success factors that drive Hybrid Identity and the things that often get overlooked. Sander Berkouwer shares his views on these situations. Of course, this session covers how to avoid these situations yourself, so we all benefit. A true storyteller’s session on real-world events from a speaker with a twisted sense of humor. Be sure to check in! 

The Hybrid Identity implementations that Sander and his team have deployed for multiple organizations, including government ones, provide him with horror stories that are becoming ready to share, now that the hurting has stopped. How we found out that one of the Web Application Proxies was no longer active and why it never got patched after implementation. How we underestimated the impact of GDPR. How we ran 300% over budget for our project because we didn’t account for the Domain Controller upgrades and UPN Suffix renames at a customer. How we found out that ‘All Users’ in Azure AD also includes guest users. How we got a $4000/day bill, when an engineer accidentally enabled all user accounts in MFA Server, triggering an Azure MFA license for everyone in the organization. How our customer treated our Hybrid Identity implementation after we were asked to decommission the environment when the customer went bankrupt. 

Sander Berkouwer calls himself an Active Directory aficionado and has seen thousands of Active Directory and Azure Active Directory implementations in his career. Sander is a Dutch MCSE, MCITP, and MCT and has been a Microsoft Most Valuable Professional (MVP) on Directory Services and Enterprise Mobility for the last eleven years. He is also a Veeam Vanguard and VMware vExpert and writes a blogs on DirTeam.com and ServerCore.net. 

Eligible for CPE Credits.

Six Horror Stories of Hybrid Identity Mismanagement

This session is based on a real-world, high-security scenario where security was highly prioritized. Christoffer will describe how he implemented a tier-based model in conjunction with physical security zones to protect core infrastructures such as Active Directory and PKI. He implemented technologies and concepts such as PAWs (Privileged Access Workstations), Smart Cards, Authentication Policies & Silos, IPSec, 802.1x. Demos will show the pitfalls of how easily an Enterprise PKI can become the weakest point when it comes to forest dominance. This session brings the reality of building up infrastructure and at the same time consolidate two nuclear power plants, hence the high level of security demand on the solution. 

Christoffer Anderson is a Principal Advisor at Enfo. Directory Services expert and former Microsoft MVP, Christoffer has developed and released several tools to manage various features in Microsoft Windows and Active Directory, such as Fine Grain Policy Tool and ESEDump. He acts on the field as a consultant and a trainer where he is involved in large and complex Active Directory and Identity Management Projects, that involves Design, Deployments, Delivering Heath Checks and Reviews.

[CPE Credits] By attending this webinar, you are eligible for CPE Credits at some professional associations. Upon viewing the entire webinar, download your Viewing Certificate from BrightTALK which you can find on the right-hand side of the page.

How Tough Are You? Protecting Active Directory at All Costs

When hit with ransomware or when your data has been taken hostage, you will face the need to negotiate with cyber criminals. Many IT and Security professionals believe that the key question is whether to pay or not to pay, however experience shows that regardless of the business decision to pay or not, communicating with cyber criminals, having a better understanding of the scope of the crisis, in-depth profiling of the threat actor and providing creative support to the mitigation efforts – all can significantly improve the overall management of any cyber crisis. In this talk, Moty Cristal, a professional crisis negotiator, will present the logic and the process steps of communicating and negotiating with cyber criminals as well as providing educational insights from recent events.

Moty Cristal is the CEO of NEST, Negotiation Strategies. He has served in various official capacities in Israeli negotiation teams with Jordan and the Palestinians, and experienced years of intense negotiations. Since 2001, Mr. Cristal advises, consults and trains business people, entrepreneurs, CEOs and senior government officials in Europe, Russia, US and Asia in analyzing, planning and designing complex negotiation processes. He has been working intensively in the energy, construction, financial, technological, pharmaceutical, industrial, transportation and aeronautical sectors, varying from deal-making negotiations, including start-ups investment and marketing processes, cross-cultural business disputes, union-management conflicts, post-merger integration, to business and national crisis management.

[CPE Credits] By attending this webinar, you are eligible for CPE Credits at some professional associations. Upon viewing the entire webinar, download your Viewing Certificate from BrightTALK which you can find on the right-hand side of the page.

The Untold Truth about Negotiating with Cyber Criminals

Andy Greenberg is a senior writer for WIRED, covering security, privacy, information freedom and hacker culture. He's the author of the book "Sandworm: A New Era of Cyberwar and the Hunt for the Kremlin's Most Dangerous Hackers." Greenberg previously worked as a senior reporter for Forbes magazine.

SANDWORM: Lessons from the Ukrainian Cyberwar and Beyond

“We started the Hybrid Identity Protection conference back in 2016 with the mission to facilitate expert collaboration and knowledge sharing in the identity world. Today, HIP is a thriving community of practitioners charged with defending cross-cloud and hybrid environments. This year, the HIP conference is fully digital and free, with technical workshops spread across four days. You’ll hear from cybersecurity authorities and peers working every day to solve complex identity challenges that arise in today’s fast-moving business environment. I invite participants to not only listen but also take part in the conversation.” - Mickey Bresman | Semperis CEO

Introductory Video- HipConf Semperis

Hybrid Identity Protection Virtual Conference

Join the host of the Hybrid Identity Protection podcast, Sean Deuby as he sits down with industry experts and a special guest, Brian Desmond. 

Special Guest: Brian Desmond is a Principal at Ravenswood Technology Group where he leads a team of professionals focused on delivering best-in-breed consulting services for the Microsoft security and identity management ecosystem. Brian was recognized annually as a Microsoft MVP for fifteen years and is the author of the fourth and fifth editions of Active Directory from O'Reilly. Brian is also a contributing author to Office 365 for IT Pros.

Joe Kaplan is the Architecture and Strategy lead for Accenture's Identity and Access Management organization within internal IT. He focuses on solving real-world identity problems for a large, complex business. Joe is the co-author of the "".NET Developer’s Guide to Directory Services Programming"" and is a former Microsoft MVP in Enterprise Mobility + Security. 

Jorge de Almeida Pinto is a Lead Identity/Security Consultant working for IAMTEC with a very strong focus on and passion for Microsoft Identity, Security & Access Management technologies, either on-premises or cloud-based. He helps and guides organizations in architecting, designing, implementing, and maintaining secure solutions with a critical, positive, and goal-achieving mindset. He has received the Microsoft MVP Award every year since 2006.

Host: Sean Deuby, 15-time Microsoft MVP and Hybrid Identity Protection Podcast Host. Sean brings 30 years’ experience in Enterprise IT and Hybrid Identity to his role as Director of Services at Semperis. An original architect and technical leader of Intel's Active Directory, Texas Instrument’s Windows NT network, and 15-time MVP alumnus, Sean has been involved with Microsoft identity technology since its inception. His experience as an identity strategy consultant for many Fortune 500 companies gives him a broad perspective on the challenges of today's identity-centered security.

Panel: Hybrid AD Security

Cyber Security

Identity Management

Active Directory

Information Security

Secure Access

Microsoft Azure

On Premise

Cloud

Hybrid Cloud

IT Security

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

The unexpected nature of natural disasters and other disruptive events means that preparation is key to managing disaster recovery and business continuity planning. Join the business continuity and disaster recovery community for live and recorded presentations discussing best practices for business continuity planning, disaster recovery programs and business continuity management. Learn from BCDR experts to develop your critical infrastructure and gain insight into tactical solutions to your BCDR issues.

Business Continuity / Disaster Recovery

Enterprise applications have become a crucial piece of infrastructure for many businesses. The enterprise applications community on BrightTALK features the latest insights in enterprise application integration, enterprise application architecture and EAS software. Join the community to gain access to thousands of videos and webinars presented by recognized enterprise information systems experts and arm yourself with the knowledge you need to succeed.

Enterprise Applications

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Panel: Hybrid AD Security

Presented by

About this talk

Semperis