Fortifying Active Directory: Combatting Misconfigurations
Jeff
BSides NYC 2024 · Day 1 · Tech - Other
In his BSides NYC presentation, "Fortifying Active Directory: Combatting Misconfigurations," Jeff Tomkiewicz delves into the pervasive and often overlooked security vulnerabilities stemming from common misconfigurations within Active Directory (AD) environments. Drawing heavily from a joint advisory released by CISA and NSA, which identified the top 10 most common network misconfigurations observed during extensive red and blue team assessments, Tomkiewicz provides a red teamer's perspective on how these flaws are exploited and, crucially, how defenders can fortify their systems. The talk serves as a critical wake-up call, highlighting that many fundamental security issues persist even within organizations that consider themselves "mature."
AI review
Competent AD security overview from a practitioner with real red team experience, anchored to the CISA/NSA top-10 advisory. Solid BSides-tier content that will genuinely help sysadmins and junior security folks, but it's a curated survey of well-documented techniques rather than original research — nothing here surprises anyone who's read the advisory itself.