You've been hit by / You've been struck by / An Exchange Exploit - So now what?

1

Duo Security

We use Sophos SG or XG at most customers. You AD-integrate it so that users need to identify on a portal site with their AD credentials and a token. Only then they are forwarded to OWA. One customer uses Duo, but I don't manage their Exchange (their HQ has its own IT), so I don't know much about it on the backend.

#Identity And Access Management #Two Factor Authentication #Identity Provider 31 social mentions

2

mimikatz

If you're looking for a place to start in offensive security, I'd recommend playing with some tools like Metasploit, Empire, Responder, Impacket, and Mimikatz in your home lab. This blog is also a great resource for understanding Active Directory security from both an offensive and defensive perspective.

#Web Application Security #Security #Attack Surface Management 14 social mentions