AAD Joined Machines - The New Lateral Movement
...This talk will cover new research of an authentication mechanism designed to allow authentication between Azure AD joined machines. We will examine and understand the foundation of the new network protocol, present a way (and a tool) to perform Pass-The-Certificate attack and finally, we will go over an open-source solution that can help you hunt for attacks....
By: Mor Rubin
Full Abstract & Presentation Materials: https://www.blackhat.com/us-22/briefi...
