https://www.fornetix.com/wp-content/uploads/2022/08/March-blog-guest-post-header.png 691 1920 Chuck White https://www.fornetix.com/wp-content/uploads/2017/05/fornetix-logo-300x30.png Chuck White2021-03-24 08:15:092022-08-30 08:52:38Hardening Systems Against Attacks Like SolarWinds
Hardening Systems Against Attacks Like SolarWinds
How Key Management, PKI Controls, and Zero Trust Principles are Applied to Thwart Advanced Persistent Threats (APTs)
For years, cybersecurity professionals argued the importance of “zero trust networks” and their concerns have been fully validated in the wake of the SolarWinds incident. Hacking techniques likely used in the SolarWinds Sunburst attack include mapping of sIDHistory, Primary Group ID, as well as AdminSDHolder to help identify and obtain cached Active Directory credentials. The compromised SAML keys and cryptographic materials were then likely used to execute administrative control and exfiltrate data over an extended duration.