Attack and Detection of DFSCoerce and NTLM relaying ADCS attacks.

In this video, I will explore the DFSCoerce tool and how to use it to escalate to complete Active Directory takeover. I will show multiple detection methods for this type of attack and show a simple mitigation step that is effective in blocking ADCS relay attacks.
DFSCoerce Tool
github.com/Wh0...
NVISO DCSync/DCShadow Suricata Rules
github.com/NVI...
Microsoft NTLM Relay Attack Against ADCS Recommendations
tinyurl.com/2s...
FollowMe:
Twitter @BriPwn
~-~~-~~~-~~-~
Please watch: "Red Team Tips February 1st: OPSEC Safe Active Directory Enumeration with SilentHound "
• Red Team Tips February...
~-~~-~~~-~~-~

[@ultravioletiris6241]

Thanks . Your lab set up is very very nice

[@CyberAttackDefense]

Thanks!

[@EdwardAmarh-01]

Great video . Informative

[@CyberAttackDefense]

Glad you liked it. If there is something else you would like to see let me know.

[@L33tb1nary]

Very nice video. I hope the sub counter rises quickly :)

[@CyberAttackDefense]

I hope so too! Thanks for watching!

[@yehonatanharizi185]

Amazing content, thanks for the dedication, really learned a lot here.

[@CyberAttackDefense]

Glad you enjoyed it!

[@bin9289]

great video!

[@CyberAttackDefense]

Thanks!