Webinar Description
Key Takeaways
- Focuses on dormant Active Directory accounts, forgotten service passwords, and abandoned data in file shares as security risks
- Includes live demonstrations of Kerberoasting, password spraying, and other attack techniques targeting inactive accounts
- Covers discovery of sensitive data in orphaned SharePoint sites and unmanaged file shares
- Designed for security professionals managing Windows and Active Directory environments
About the Event
This webinar examines how dormant identities and forgotten data in Windows environments create persistent security vulnerabilities. Pentester Brian Johnson demonstrates attack techniques targeting these weaknesses, followed by defensive strategies from Netwrix.
The Threat of Dormant Identities
Zombie identities originate from several common oversights: passwords configured to never expire, service accounts that administrators avoid modifying due to operational concerns, and former employee accounts that remain enabled after departure. These dormant accounts provide attackers with ready-made entry points that often evade detection because they appear legitimate.
Attack Techniques Demonstrated
The session includes live demonstrations of how attackers exploit inactive accounts. Techniques covered include Kerberoasting (extracting service account credentials from Active Directory) and password spraying (testing common passwords against multiple accounts). These methods allow attackers to hijack dormant accounts and move laterally through networks.
Hidden Data Risks
Beyond identity concerns, the webinar addresses sensitive data accumulating in forgotten locations. PII, intellectual property, configuration files, and API keys often persist in orphaned SharePoint sites and unmanaged file shares, creating exposure that organizations may not realize exists.
Who Should Attend
This webinar is relevant for Active Directory administrators, identity and access management professionals, security operations teams, and IT professionals responsible for Windows infrastructure and data governance.