Incident response requires thorough preparation and planning. In this session, we'll explore real-life cases to consider whether threats can be analyzed and detected in a timely manner before a security incident occurs and also discuss strategies to enhance cybersecurity resilience.

Due to Active Directory (AD) being responsible for account privileges and access control in the network, there are certain overlooked misconfigurations that can be exploited by attackers, posing serious threats to network security. The presentation will focus on explaining misconfigurations in three key areas of AD: Windows authentication mechanisms, Access Control Lists (ACLs), and delegation mechanisms, as well as how to identify the security risks posed by these subtle modifications.