March 2020 Meetup Recap: Secure All the Things! Kerberos, LDAPS, DNS
ColaSec Intro Slides
About David Guirl
I am an IT Security Administrator for the SC DMV for nearly 6 years. My latest project included migrating Exchange 2013 to Office 365. I have been a co-organizer with ColaSec for many years, and have presented Microsoft-related topics several times in the past. I also ride to #ENDALZ, an annual 252-mile bicycle ride fundraiser for the Alzheimer's Association.
Secure all the Things! Kerberos, LDAPS, DNS
We will discuss the struggle and strategy of implementing Microsoft best practices for Kerberos, LDAP, and DNS. Microsoft is notorious for supporting legacy protocols in favor of backwards compatibility, leaving your internal domain insecure and vulnerable to a myriad of attacks. Microsoft announced in February 2020 that they are changing their security posture and requiring LDAPS in the very near future. With an "assume breach" model, we work to secure as many existing communication protocols as we can with little to no impact on business operations.