Detect and Mitigate Against Key Sunburst TTPs (NAM) - Seguridad Mania.com - España y América Latina

As evident from the recent Sunburst attack, dynamic IT environments and digital transformation initiatives are vulnerable to bad actors that use a variety of tactics, techniques and procedures (TTPs) to launch a highly targeted attack through traditional IT processes. Enterprises should focus on mitigating the most recent Sunburst post-exploit activities while also preparing to detect, mitigate and prevent future threats that use similar TTPs. In this CrowdCast, Andrew Harris, CrowdStrike’s Public Sector Technology Strategist will demonstrate how CrowdStrike Falcon detects and prevents: • The Sunburst attack and key learnings on Sunspot and other entry point malware • Lateral movement, including leveraging the use of service accounts • Golden SAML (Security Assertion Markup Language) credential dump of an Active Directory Federation Services (AD FS) server