Introduction
This website will be used to publish informations about my masters's thesis. The work done so far includes:
We described the basics of Active Directory and also describe most of the attacks that we want to analyse.
The attacks were practically realized and we determined what event logs are created on both Domain Controller and workstation when the attack happens.
In the next few months we plan to expand the analysis to recommended configuration of logging (from the default settings) and create a tool which would be able to detect these attacks from supplied event logs.
