Securing the Past with Dustin Heywood

The BlueHat Podcast

Innehåll tillhandahållet av Bruce Bracken. Allt poddinnehåll inklusive avsnitt, grafik och podcastbeskrivningar laddas upp och tillhandahålls direkt av Bruce Bracken eller deras podcastplattformspartner. Om du tror att någon använder ditt upphovsrättsskyddade verk utan din tillåtelse kan du följa processen som beskrivs här https://sv.player.fm/legal.

8M ago 41:56

MP3•Episod hem

Dustin Heywood, Hacker, Researcher, and Senior Leader at IBM, joins Wendy Zenone and Nic Fillingham on this week's episode of The BlueHat Podcast. Dustin provided a live demonstration of cracking NTLM version 1 during his BlueHat presentation, showcasing the process of responding to challenges, using coercion techniques, and ultimately extracting and cracking the NTLM hash. Dustin, Nic, and Wendy discuss checking group policies, auditing every object, ensuring relevant systems, and managing IT assets effectively. They emphasize the importance of IT asset management and recommend quarantining legacy systems with restricted access.

In This Episode You Will Learn:

Why security professionals need business skills for effective communication
Advice for auditing legacy systems with vulnerable protocols
Extracting DPAPI keys and decrypting browser session history

Some Questions We Ask:

How do you manage risk for legacy systems deemed necessary for business?
Can you discuss some of the outdated protocols in current IT environments?
What guidance would you offer to IT professionals looking to audit their systems?

Resources:

View Dustin Heywood on LinkedIn

View Wendy Zenone on LinkedIn

View Nic Fillingham on LinkedIn

Related Microsoft Podcasts:

Discover and follow other Microsoft podcasts at microsoft.com/podcasts

Hosted on Acast. See acast.com/privacy for more information.

41 episoder

#Tech #Bruce Bracken #Cybersecurity #Security Research #Hacking #Red Team #Blue Teaming #Incident Response #Vulnerability Research #Threat Intel #Security Ai #Penetration Testing #InfoSec #Information Security #Hackers #Artificial Intelligence #Machine Learning