Name: TEC Talk: The Dark Corners of Microsoft 365 that Microsoft Ignores
Start: 2024-11-18T16:27:00Z
End: 2024-11-18T16:28:07.000Z
Location: BrightTALK
Rating: 5

Quest Software delivers cybersecurity, data performance, directory and identity, and modernization solutions that simplify enterprise IT management. Business challenges, stormy economies and market changes are going to happen. But, it’s how your organization prepares, withstands and responds that makes the difference. See how our portfolio can elevate your IT resilience.

There likely isn’t an organization today that isn’t guilty of, at some point, making a change that granted elevated access… and completely forgetting about it. Two decades of “set it and forget it” changes to group memberships, permissions assignments, and more domains and trusts than you’d care to admit has your complex AD environment harboring quite a bit of standing cybersecurity risk for the organization – all due to what is commonly referred to as “Elevated Access Sprawl”.

Add to this the fact that many of the resources granted access to are Tier 0 assets – those critical servers, services, and accounts (think DCs, DNS, backup services, etc.) – that, if compromised, would lead to either a completely breached environment, disrupted operations or both.

So, how do these risks impact your AD environment and how can you address them?

Join Quest expert, Becky Cross, and four-time Microsoft MVP Nick Cavalancia, as they discuss:

- What’s really at risk with elevated access sprawl and Tier 0 assets?
- How threat actors leverage one source of risk to take advantage of the other
- What is AD Modernization and how it comprehensively addresses these risks

Tackling Your Standing Active Directory Cyber Risk: Tier 0 Assets and Elevated Access Sprawl

Ransomware targeting Active Directory continues to be one of the top attack techniques for cyber criminals because threat defenses simply can’t keep up with new malware variants. Therefore, having a comprehensive, repeatable, and fast disaster recovery capability must be part of your cyber resilience strategy.

This session will drill into the proven strategies and criteria for developing a disaster recovery solution for AD and Entra ID. We’ll cover:

-  How to align your recovery strategy with business priorities
-  The importance of assurance and durability in software partnerships
-  True object level recovery and protection
-  Maintaining visibility during recovery
-  Protecting recovery from malware reinfection
-  Hardening recovery with airgap and immutable storage
-  Best practice testing and continuous improvement

Disaster recovery is no place to cut corners or get a less than comprehensive solution that can mesh with your business practices. That’s why it’s crucial to understand the key criteria for a world-class Active Directory disaster recovery strategy.

Ransomware Recovery Playbook for Active Directory and Entra ID

Identity, and Active Directory in particular, is a cyber attacker’s prime target, with 80% of breaches today involving compromised identities. From an attackers’ point of view, it makes sense – control Active Directory, and you control the entire organization.

Modern threats are evolving and are only getting more challenging to overcome. In order to truly be secure, organizations need to establish true cyber resilience – before, during and after an attack – and incorporate identity threat detection and response (ITDR) disciplines within their Active Directory.

Join Quest security experts, Matthew Vinton and Bryan Patton, for an invaluable session where we will discuss the top modern Active Directory threats, such as:

A constantly growing attack surface
AD misconfigurations
Alert fatigue
Neglect of on-premises
Then, learn how you can easily mitigate Active Directory  threats while establishing a lifecycle of cyber resilience and ITDR, with Quest.

Mitigating Active Directory Threats Before, During and After Disaster

Whether you’re dealing with M&A, moving to Entra, or modernizing your AD for greater security, you may find yourself in a situation where you’d rather move your Windows endpoint devices instead of reimaging them or doing a full hardware refresh. To successfully plan and complete your migration, you will have a lot of questions to consider:

Are you moving to Entra or staying on-prem?
Do you need coexistence or not?
Can you do it over a weekend or in phases?
Are you moving the devices only or does this include an identity migration?
And what about the user profiles, specific system configurations, and new applications and settings that all need to be updated to ensure users have a productive working environment post-migration?

The Reality of Windows Device Migrations: Making the Impossible Possible

TEC Talks

Microsoft 365 is a complicated platform and there’s much to learn and understand. Behind the scenes, some aspects of Microsoft 365 are incomplete, irrational, or simply broken. This session examines some of the frequent issues faced by Microsoft 365 tenants in an informative and objective way. We’ll talk about why the problems occur and what organizations can do to minimize their effect on daily activities. You might be astonished at what you hear.

TEC Talk: The Dark Corners of Microsoft 365 that Microsoft Ignores

Miscorosft

CoPilot

Active Directory

Entra ID

Ransomware

Authentication

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

TEC Talk: The Dark Corners of Microsoft 365 that Microsoft Ignores

Presented by

About this talk

More from this channel