Enter To Win A
LEGO PlayStation
Thanks for stopping by the Professionally Evil booth at Queen City Conference. Fill out the form for a chance to win the prize. We draw winners on Monday, and we’ll reach out by email.
Check out our talks at Queen City Con:
Sat, November 14 | 11:00 – 11:45 A.M.
The Clock Is Ticking
Prepping for Your Network Penetration Test
Christian Duncan
Managing Senior Security Consultant, Secure Ideas
Scheduling a penetration test means you are not waiting for a breach to show you where the gaps are. But the preparation and communication around a network penetration test matter as much as the testing itself. Christian Duncan walks through what to know before, during, and after, so your team gets the most from every finding.
Track 3 · Kilo Bytes
Sat, November 14 | 2:00 – 2:45 P.M.
No Exploit Required
Why AD CS Keeps Getting You Domain Admin
Zach Tackett
Security Consultant, Secure Ideas
Memorizing ESC attack paths falls short when you meet a custom AD CS configuration that fits no category. Zach Tackett breaks down the trust model behind certificate-based authentication in Active Directory, the common themes across the ESC techniques, and how to recognize an attack path by asking what a certificate lets an attacker do.
Track 1 · Giga Bytes
Sat, November 14 | 3:00 – 3:45 P.M.
Why ‘Domain Admin’ Isn’t Always the Goal
Objective-Based Offensive Security
David Young
Managing Senior Security Consultant, Secure Ideas
Getting Domain Admin has become shorthand for success, but it can hide the risks that matter most to the business. David Young reframes offensive security around objectives, using real scenarios where Domain Admin was irrelevant, and shares a decision framework for lateral movement: does this move us closer to the objective?
Track 2 · Mega Bytes