The Past, Present & Future of Enterprise Security

Explore the evolution of enterprise security and Active Directory attacks in this 44-minute talk from Hack in Paris. Delve into the dramatic changes in pentesting and attack methodologies over the past 4-5 years, examining the increasingly sophisticated tactics, techniques, and procedures (TTPs) employed by malware and state-sponsored attacks. Discover how open-source tool-sets have revolutionized domain privilege escalation, lateral movement, and post-exploitation, enabling the automation of complex attack processes. Learn why we are entering the 'Golden Age' of Attack Automation, where unprivileged users can potentially escalate to Domain Administrator in almost any Active Directory environment, regardless of size or complexity. Gain valuable insights into the past, present, and future landscape of enterprise security from speaker Marcello Salvati.

HIP18 - Talk 12 The Past, Present & Future of Enterprise Security