Hide And Seek With Active Directory: Secrets For Persistence and Deception

[@tebo2286]

Wow, this is cool. Thank you for sharing

[@CyberAttackDefense]

Thanks for watching!

[@EmSec]

Thank you for your videos. We learned a lot from you, sir.

[@CyberAttackDefense]

Glad you enjoy them. Thanks for watching!

[@fatm3at]

Cool, I had same idea two week ago before watch this video and talked to a sysadmin, they were like: "are you saying we need to manually move X users from Y OUs which applied Z group policy into a OU just to stop them from reading LDAP?"

[@CyberAttackDefense]

Yep it’s kind of hard to explain to sysadmins. I have had to show many of them.

[@ferassami3362]

Thanks 🙏❤️

[@CyberAttackDefense]

You're welcome 😊

[@user-zw9ye2he4k]

Can you use any part of this technique to hide just one or two users among several others for persistence?

[@CyberAttackDefense]

Yes you can. You just have to set the ACE right on the object.

[@bigburple6269]

hello! sorry if this is a dumb question but do i have to be really good with programming to understand/do all of this? i found your channel and i thought it was awesome, but i feel like im missing a lot of foundational knowledge to understand fully. i know i could google it but i feel like it'd be better if i asked, sorry to bother you

[@CyberAttackDefense]

Nope programming isn’t required. General knowledge of Windows and Linux is helpful but this channel shows simple tradecraft. I’m not writing code often for anything here.