AAD Joined Machines - The New Lateral Movement

...This talk will cover new research of an authentication mechanism designed to allow authentication between Azure AD joined machines. We will examine and understand the foundation of the new network protocol, present a way (and a tool) to perform Pass-The-Certificate attack and finally, we will go over an open-source solution that can help you hunt for attacks....

By: Mor Rubin

Full Abstract & Presentation Materials: https://www.blackhat.com/us-22/briefings/schedule/#aad-joined-machines---the-new-lateral-movement-26889

aad lateral movement machines