使用Player FM应用程序离线!
Securing the Past with Dustin Heywood
Manage episode 407882027 series 3486243
Dustin Heywood, Hacker, Researcher, and Senior Leader at IBM, joins Wendy Zenone and Nic Fillingham on this week's episode of The BlueHat Podcast. Dustin provided a live demonstration of cracking NTLM version 1 during his BlueHat presentation, showcasing the process of responding to challenges, using coercion techniques, and ultimately extracting and cracking the NTLM hash. Dustin, Nic, and Wendy discuss checking group policies, auditing every object, ensuring relevant systems, and managing IT assets effectively. They emphasize the importance of IT asset management and recommend quarantining legacy systems with restricted access.
In This Episode You Will Learn:
- Why security professionals need business skills for effective communication
- Advice for auditing legacy systems with vulnerable protocols
- Extracting DPAPI keys and decrypting browser session history
Some Questions We Ask:
- How do you manage risk for legacy systems deemed necessary for business?
- Can you discuss some of the outdated protocols in current IT environments?
- What guidance would you offer to IT professionals looking to audit their systems?
Resources:
View Dustin Heywood on LinkedIn
View Nic Fillingham on LinkedIn
Related Microsoft Podcasts:
Discover and follow other Microsoft podcasts at microsoft.com/podcasts
Hosted on Acast. See acast.com/privacy for more information.
37集单集
Manage episode 407882027 series 3486243
Dustin Heywood, Hacker, Researcher, and Senior Leader at IBM, joins Wendy Zenone and Nic Fillingham on this week's episode of The BlueHat Podcast. Dustin provided a live demonstration of cracking NTLM version 1 during his BlueHat presentation, showcasing the process of responding to challenges, using coercion techniques, and ultimately extracting and cracking the NTLM hash. Dustin, Nic, and Wendy discuss checking group policies, auditing every object, ensuring relevant systems, and managing IT assets effectively. They emphasize the importance of IT asset management and recommend quarantining legacy systems with restricted access.
In This Episode You Will Learn:
- Why security professionals need business skills for effective communication
- Advice for auditing legacy systems with vulnerable protocols
- Extracting DPAPI keys and decrypting browser session history
Some Questions We Ask:
- How do you manage risk for legacy systems deemed necessary for business?
- Can you discuss some of the outdated protocols in current IT environments?
- What guidance would you offer to IT professionals looking to audit their systems?
Resources:
View Dustin Heywood on LinkedIn
View Nic Fillingham on LinkedIn
Related Microsoft Podcasts:
Discover and follow other Microsoft podcasts at microsoft.com/podcasts
Hosted on Acast. See acast.com/privacy for more information.
37集单集
Tüm bölümler
×欢迎使用Player FM
Player FM正在网上搜索高质量的播客,以便您现在享受。它是最好的播客应用程序,适用于安卓、iPhone和网络。注册以跨设备同步订阅。