You've never evaluated your OT Active Directory Structure
About This Session
Active directory are dirty IT words that are associated with enterprise system administration and cybersecurity. Except, many DCS and SCADA systems require an active directory structure to function and these are put in place, typically with default configurations, without any proper evaluation.
Simple tools exist to give a general overview of the security posture of your OT domains. Running free tools like pingcastle and bloodhound are simple enough and even PowerShell is available to run commands across the environment and expose architecture weaknesses that a pentest team or an attacker would exploit.
Look for domain trust, permissive accounts, weak group policy objects and find out why the IT/OT firewall is not doing as much as it should.
Simple tools exist to give a general overview of the security posture of your OT domains. Running free tools like pingcastle and bloodhound are simple enough and even PowerShell is available to run commands across the environment and expose architecture weaknesses that a pentest team or an attacker would exploit.
Look for domain trust, permissive accounts, weak group policy objects and find out why the IT/OT firewall is not doing as much as it should.
Speaker
Mackenize Morris
Principal Industrial Consultant - Dragos
Mackenize Morris is a Principal Industrial Consultant at the industrial cybersecurity company Dragos, Inc. where he assists the professional services teams in conducting network and vulnerability assessments.
Previously, Mackenize worked as a chemical engineer and system architect and administrator for a DOE contractor for a DCS system until fully switching over to an ICS cybersecurity position within the DOE complex.
Mackenize received his B.S. in Chemical Engineering and MBA from the University of South Carolina as well as a Masters in Information Security Engineering from the SANS Technology Institute. He currently holds a dozen GIAC Certifications.
Mackenize’s name is pronounced like Mackenzie; the IZE spelling was a result of a spelling error on his birth certificate.
Previously, Mackenize worked as a chemical engineer and system architect and administrator for a DOE contractor for a DCS system until fully switching over to an ICS cybersecurity position within the DOE complex.
Mackenize received his B.S. in Chemical Engineering and MBA from the University of South Carolina as well as a Masters in Information Security Engineering from the SANS Technology Institute. He currently holds a dozen GIAC Certifications.
Mackenize’s name is pronounced like Mackenzie; the IZE spelling was a result of a spelling error on his birth certificate.