Event FinderTokens, Tickets, & Thievery - Authentication Material Theft for Privilege Escalation and Defense Planning
- Starts
- Ends
- Format
- In person
- Location
- T12 Distillery at The Foundry, 111 South 11th Street, West Des Moines, IA 50265
About This Event
Doors open at 6 PM. 7:00 PM · Tokens, Tickets, & Thievery - Authentication Material Theft for Privilege Escalation and Defense Planning — Andrew Ware We all know that you’re supposed to protect privileged accounts with strong passwords and MFA, but what if the authentication process itself can be undermined? In this talk I’ll explore how stolen authentication material can be used to hijack accounts without ever needing to obtain the actual credentials. We’ll look at classic Kerberos ticket theft and Microsoft Entra access token theft. The lesson for defenders: Strong credentials are only part of the defense strategy. The entire authentication process needs to be treated as privileged from start to finish.