Monday, March 31, 2025

Track 1 (Arlington Forum - 30th Floor) Track 2 (Observation Hub - 29th Floor)

8:00 am

East Gallery (29th and 30th Floor)
8:00 am → 60 min

Registration/Breakfast

9:00 am

Track 1 (Arlington Forum - 30th Floor)
9:00 am → 25 min

Welcome Keynote

9:30 am

Track 1 (Arlington Forum - 30th Floor)
9:30 am → 50 min

Keep only those privileges that speak to your heart: Automating Active Directory Privilege Clean-up

Track 2 (Observation Hub - 29th Floor)
9:30 am → 50 min

Cracking the Identity Perimeter: Towards a Unified Access Control Model

10:20 am

East Gallery (29th and 30th Floor)
10:20 am → 15 min

Coffee Break

10:35 am

Track 1 (Arlington Forum - 30th Floor)
10:35 am → 50 min

Putting NTLM in the Doghouse

Track 2 (Observation Hub - 29th Floor)
10:35 am → 50 min

Echoes of Intrusion: Demystifying MS Graph API Attacks

11:35 am

Track 1 (Arlington Forum - 30th Floor)
11:35 am → 50 min

Security Boundaries within an Active Directory Forest

Track 2 (Observation Hub - 29th Floor)
11:35 am → 50 min

The Cat Chronicles: Breaking Sandboxes and Snatching Cookies

12:30 pm

East Gallery (29th and 30th Floor)
12:30 pm → 90 min

Lunch

2:00 pm

Track 1 (Arlington Forum - 30th Floor)
2:00 pm → 50 min

The Domain is Not a Trust Boundary – Tenant Edition

Track 2 (Observation Hub - 29th Floor)
2:00 pm → 50 min

I don't know what graph theory is, and at this point I'm too afraid to ask

3:00 pm

Track 1 (Arlington Forum - 30th Floor)
3:00 pm → 50 min

The Certificate Strikes Back: ADCS's Path to Azure

Track 2 (Observation Hub - 29th Floor)
3:00 pm → 50 min

The Admin's Guide to Preventing SCCM Attacks

3:45 pm

East Gallery (29th and 30th Floor)
3:45 pm → 15 min

Coffee Break

4:00 pm

Track 1 (Arlington Forum - 30th Floor)
4:00 pm → 50 min

Taking the "B" Out of DBA - An Attack Path Against AD FS Through Database Administration

Track 2 (Observation Hub - 29th Floor)
4:00 pm → 50 min

Modern macOS Red Teaming Tactics

5:00 pm

East Gallery (29th and 30th Floor)
5:00 pm → 120 min

Reception

Tuesday, April 1, 2025

Track 1 (Arlington Forum - 30th Floor) Track 2 (Observation Hub - 29th Floor)

8:00 am

East Gallery (29th and 30th Floor)
8:00 am → 60 min

Registration/Breakfast

9:00 am

Track 1 (Arlington Forum - 30th Floor)
9:00 am → 25 min

Welcome Keynote

9:30 am

Track 1 (Arlington Forum - 30th Floor)
9:30 am → 50 min

Hunting SMB Shares with Data, Graphs, Charts, and LLMs

Track 2 (Observation Hub - 29th Floor)
9:30 am → 50 min

Abusing AUs, Confusing the SOC: Entra ID's Administrative Unit Attack Paths

10:20 am

East Gallery (29th and 30th Floor)
10:20 am → 15 min

Coffee Break

10:35 am

Track 1 (Arlington Forum - 30th Floor)
10:35 am → 50 min

Woof, Woof! Meet Sniffer BloodHound: An Algorithm-Driven Framework for Attack Path Analysis

Track 2 (Observation Hub - 29th Floor)
10:35 am → 50 min

LSA Whisperer: The Cloud Update

11:35 am

Track 1 (Arlington Forum - 30th Floor)
11:35 am → 50 min

BloodHound: A Year in Review

Track 2 (Observation Hub - 29th Floor)
11:35 am → 50 min

Unguarding Microsoft Credential Guard

12:30 pm

East Gallery (29th and 30th Floor)
12:30 pm → 90 min

Lunch

2:00 pm

Track 1 (Arlington Forum - 30th Floor)
2:00 pm → 50 min

Active Directory Breach to Compromise Third-party Applications

Track 2 (Observation Hub - 29th Floor)
2:00 pm → 50 min

There and Back Again: An Attacker's Tale of DCs in AWS

3:00 pm

Track 1 (Arlington Forum - 30th Floor)
3:00 pm → 50 min

Compromising Workspace from Windows, AD & EntraID

Track 2 (Observation Hub - 29th Floor)
3:00 pm → 50 min

The SQL Server Crypto Detour

Wednesday, April 2, 2025

Colonial Hub South (29th Floor) Colonial Hub North (29th Floor) Observation Hub North (29th Floor) Observation Hub South (29th Floor)

8:00 am

East Gallery (29th Floor)
8:00 am → 60 min

Breakfast

9:00 am

Colonial Hub South (29th Floor)
9:00 am → 80 min

Adversary Perspectives: Azure

Colonial Hub North (29th Floor)
9:00 am → 80 min

Adversary Tactics: Tradecraft Analysis

Observation Hub North (29th Floor)
9:00 am → 80 min

Adversary Tactics: Red Team Operations

Observation Hub South (29th Floor)
9:00 am → 80 min

Adversary Tactics: Identity-Driven Offensive Tradecraft

10:20 am

East Gallery (29th Floor)
10:20 am → 15 min

Coffee Break

10:35 am

Colonial Hub South (29th Floor)
10:35 am → 115 min

Adversary Perspectives: Azure

Colonial Hub North (29th Floor)
10:35 am → 115 min

Adversary Tactics: Tradecraft Analysis

Observation Hub North (29th Floor)
10:35 am → 115 min

Adversary Tactics: Red Team Operations

Observation Hub South (29th Floor)
10:35 am → 115 min

Adversary Tactics: Identity-Driven Offensive Tradecraft

12:30 pm

East Gallery (29th Floor)
12:30 pm → 60 min

Lunch

1:30 pm

Colonial Hub South (29th Floor)
1:30 pm - 3:45 pm

Adversary Perspectives: Azure

Colonial Hub North (29th Floor)
1:30 pm - 3:45 pm

Adversary Tactics: Tradecraft Analysis

Observation Hub North (29th Floor)
1:30 pm - 3:45 pm

Adversary Tactics: Red Team Operations

Observation Hub South (29th Floor)
1:30 pm - 3:45 pm

Adversary Tactics: Identity-Driven Offensive Tradecraft

3:45 pm

East Gallery (29th Floor)
3:45 pm → 15 min

Coffee Break

4:00 pm

Colonial Hub South (29th Floor)
4:00 pm → 60 min

Adversary Perspectives: Azure

Colonial Hub North (29th Floor)
4:00 pm → 60 min

Adversary Tactics: Tradecraft Analysis

Observation Hub North (29th Floor)
4:00 pm → 60 min

Adversary Tactics: Red Team Operations

Observation Hub South (29th Floor)
4:00 pm → 60 min

Adversary Tactics: Identity-Driven Offensive Tradecraft

Thursday, April 3, 2025

Colonial Hub South (29th Floor) Colonial Hub North (29th Floor) Observation Hub North (29th Floor) Observation Hub South (29th Floor)

8:00 am

East Gallery (29th Floor)
8:00 am → 60 min

Breakfast

9:00 am

Colonial Hub South (29th Floor)
9:00 am → 80 min

Adversary Perspectives: Azure

Colonial Hub North (29th Floor)
9:00 am → 80 min

Adversary Tactics: Tradecraft Analysis

Observation Hub North (29th Floor)
9:00 am → 80 min

Adversary Tactics: Red Team Operations

Observation Hub South (29th Floor)
9:00 am → 80 min

Adversary Tactics: Identity-Driven Offensive Tradecraft

10:20 am

East Gallery (29th Floor)
10:20 am → 15 min

Coffee Break

10:35 am

Colonial Hub South (29th Floor)
10:35 am → 115 min

Adversary Perspectives: Azure

Colonial Hub North (29th Floor)
10:35 am → 115 min

Adversary Tactics: Tradecraft Analysis

Observation Hub North (29th Floor)
10:35 am → 115 min

Adversary Tactics: Red Team Operations

Observation Hub South (29th Floor)
10:35 am → 115 min

Adversary Tactics: Identity-Driven Offensive Tradecraft

12:30 pm

East Gallery (29th Floor)
12:30 pm → 60 min

Lunch

1:30 pm

Colonial Hub South (29th Floor)
1:30 pm - 3:45 pm

Adversary Perspectives: Azure

Colonial Hub North (29th Floor)
1:30 pm - 3:45 pm

Adversary Tactics: Tradecraft Analysis

Observation Hub North (29th Floor)
1:30 pm - 3:45 pm

Adversary Tactics: Red Team Operations

Observation Hub South (29th Floor)
1:30 pm - 3:45 pm

Adversary Tactics: Identity-Driven Offensive Tradecraft

3:45 pm

East Gallery (29th Floor)
3:45 pm → 15 min

Coffee Break

4:00 pm

Colonial Hub South (29th Floor)
4:00 pm → 60 min

Adversary Perspectives: Azure

Colonial Hub North (29th Floor)
4:00 pm → 60 min

Adversary Tactics: Tradecraft Analysis

Observation Hub North (29th Floor)
4:00 pm → 60 min

Adversary Tactics: Red Team Operations

Observation Hub South (29th Floor)
4:00 pm → 60 min

Adversary Tactics: Identity-Driven Offensive Tradecraft

Friday, April 4, 2025

Colonial Hub South (29th Floor) Colonial Hub North (29th Floor) Observation Hub North (29th Floor) Observation Hub South (29th Floor)

8:00 am

East Gallery (29th Floor)
8:00 am → 60 min

Breakfast

9:00 am

Colonial Hub South (29th Floor)
9:00 am → 80 min

Adversary Perspectives: Azure

Colonial Hub North (29th Floor)
9:00 am → 80 min

Adversary Tactics: Tradecraft Analysis

Observation Hub North (29th Floor)
9:00 am → 80 min

Adversary Tactics: Red Team Operations

Observation Hub South (29th Floor)
9:00 am → 80 min

Adversary Tactics: Identity-Driven Offensive Tradecraft

10:20 am

East Gallery (29th Floor)
10:20 am → 15 min

Coffee Break

10:35 am

Colonial Hub South (29th Floor)
10:35 am → 115 min

Adversary Perspectives: Azure

Colonial Hub North (29th Floor)
10:35 am → 115 min

Adversary Tactics: Tradecraft Analysis

Observation Hub North (29th Floor)
10:35 am → 115 min

Adversary Tactics: Red Team Operations

Observation Hub South (29th Floor)
10:35 am → 115 min

Adversary Tactics: Identity-Driven Offensive Tradecraft

12:30 pm

East Gallery (29th Floor)
12:30 pm → 60 min

Lunch

1:30 pm

Colonial Hub South (29th Floor)
1:30 pm - 3:45 pm

Adversary Perspectives: Azure

Colonial Hub North (29th Floor)
1:30 pm - 3:45 pm

Adversary Tactics: Tradecraft Analysis

Observation Hub North (29th Floor)
1:30 pm - 3:45 pm

Adversary Tactics: Red Team Operations

Observation Hub South (29th Floor)
1:30 pm - 3:45 pm

Adversary Tactics: Identity-Driven Offensive Tradecraft

3:45 pm

East Gallery (29th Floor)
3:45 pm → 15 min

Coffee Break

4:00 pm

Colonial Hub South (29th Floor)
4:00 pm → 60 min

Adversary Perspectives: Azure

Colonial Hub North (29th Floor)
4:00 pm → 60 min

Adversary Tactics: Tradecraft Analysis

Observation Hub North (29th Floor)
4:00 pm → 60 min

Adversary Tactics: Red Team Operations

Observation Hub South (29th Floor)
4:00 pm → 60 min

Adversary Tactics: Identity-Driven Offensive Tradecraft

Saturday, April 5, 2025

Colonial Hub South (29th Floor) Colonial Hub North (29th Floor) Observation Hub North (29th Floor) Observation Hub South (29th Floor)

8:00 am

East Gallery (29th Floor)
8:00 am → 60 min

Breakfast

9:00 am

Colonial Hub South (29th Floor)
9:00 am → 80 min

Adversary Perspectives: Azure

Colonial Hub North (29th Floor)
9:00 am → 80 min

Adversary Tactics: Tradecraft Analysis

Observation Hub North (29th Floor)
9:00 am → 80 min

Adversary Tactics: Red Team Operations

Observation Hub South (29th Floor)
9:00 am → 80 min

Adversary Tactics: Identity-Driven Offensive Tradecraft

10:20 am

East Gallery (29th Floor)
10:20 am → 15 min

Coffee Break

10:35 am

Colonial Hub South (29th Floor)
10:35 am → 115 min

Adversary Perspectives: Azure

Colonial Hub North (29th Floor)
10:35 am → 115 min

Adversary Tactics: Tradecraft Analysis

Observation Hub North (29th Floor)
10:35 am → 115 min

Adversary Tactics: Red Team Operations

Observation Hub South (29th Floor)
10:35 am → 115 min

Adversary Tactics: Identity-Driven Offensive Tradecraft

12:30 pm

East Gallery (29th Floor)
12:30 pm → 60 min

Lunch

1:30 pm

Colonial Hub South (29th Floor)
1:30 pm - 3:45 pm

Adversary Perspectives: Azure

Colonial Hub North (29th Floor)
1:30 pm - 3:45 pm

Adversary Tactics: Tradecraft Analysis

Observation Hub North (29th Floor)
1:30 pm - 3:45 pm

Adversary Tactics: Red Team Operations

Observation Hub South (29th Floor)
1:30 pm - 3:45 pm

Adversary Tactics: Identity-Driven Offensive Tradecraft

3:45 pm

East Gallery (29th Floor)
3:45 pm → 15 min

Coffee Break

4:00 pm

Colonial Hub South (29th Floor)
4:00 pm → 60 min

Adversary Perspectives: Azure

Colonial Hub North (29th Floor)
4:00 pm → 60 min

Adversary Tactics: Tradecraft Analysis

Observation Hub North (29th Floor)
4:00 pm → 60 min

Adversary Tactics: Red Team Operations

Observation Hub South (29th Floor)
4:00 pm → 60 min

Adversary Tactics: Identity-Driven Offensive Tradecraft

Session and Speaker Management powered by Sessionize.com