It should be evident by now that ransomware is the number one threat to your organization. With Ransomware-as-a-Service in full swing and attacks by a growing number of talented and effective “affiliates”, we’re seeing large enterprises, critical infrastructure companies, and supply chain vendors all becoming victims of ransomware attacks.
In nearly every ransomware attack, there’s the need to find a means to access as close to every system and endpoint as is possible. This is normally where Active Directory is targeted and compromised to facilitate the needed access. NIST’s Cybersecurity Framework provides organizations with a central repository of guidance on how to identify, protect, detect, respond to, and recover from cyberattacks including ransomware.
But how does this specifically apply to Active Directory?
In this real-training-for-free session, Microsoft MVP and cybersecurity expert Nick Cavalancia takes my seat, and will first discuss:
- A primer on the NIST Cybersecurity Framework
- Aligning Ransomware kill chain tactics involving Active Directory to the CSF
- Preventative and Responsive steps to take against ransomware attacks
Nick will then be joined by Fouad Hamdi, Principal Solutions Architect at Quest, who will provide insight into what data can be gathered and used within a Windows environment to meet the needs of each of the CSF Functions with regard to protecting Active Directory. This includes:
- Identifying risks in systems and AD
- Protecting AD by properly managing permissions to regularly targeted elevation methods
- Detecting changes that will elevate threat actor privileges to compromised accounts
- Recovering parts or all of AD back to a known-secure configuration
This real training for free event will be jam packed with technical detail and real-world application. Register today!