Credential Theft Courses and Certifications

RSA Conference

DBIR Insights on the Use of Stolen Credentials

Explore the ecosystem of stolen credentials, examining their sources, attacker usage patterns, and essential organizational protection strategies based on DBIR breach data analysis.

• YouTube
• 36 minutes
• On-Demand
• Free Video

John Savill's Technical Training

Protecting Against Credential and Token Theft

Explore credential and token theft protection strategies, including authentication strengths, token binding, and continuous access evaluation for enhanced security in digital environments.

• YouTube
• 53 minutes
• On-Demand
• Free Video

Red Canary

Understanding Identity Attacks - From Credential Theft to Account Takeover

Explore common identity attack methods like phishing, credential theft, and session hijacking to understand how cybercriminals compromise authentication systems and gain unauthorized access.

• YouTube
• 10 minutes
• On-Demand
• Free Video

Preventing Credential Theft Lateral Movement After Initial Compromise

Learn techniques to prevent credential theft and lateral movement after initial network compromise, including secure configuration, audits, and live demonstrations of common attack methods.

• YouTube
• 1 hour
• On-Demand
• Conference Talk

Black Hat

Pass the Hash and Other Credential Theft - Reuse - Mitigating Risk

Explore Pass the Hash attacks and Microsoft's recommended mitigations, including credential theft prevention, authentication policies, and platform changes for enhanced cybersecurity.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

WEareTROOPERS

How to Efficiently Protect AD from Credential Theft & Compromise

Learn efficient strategies to protect Active Directory from credential theft and compromise, focusing on authentication, attack methods, and mitigation techniques.

• YouTube
• 1 hour
• On-Demand
• Conference Talk

Deploying PAWs as Part of a Strategy to Limit Credential Theft and Lateral Movement

Explore strategies to limit credential theft and lateral movement using Privileged Access Workstations (PAWs), including deployment models, Active Directory setup, and network segmentation.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

How Hackers Steal Passwords: 5 Attack Methods Explained

Discover five password theft techniques—guessing, harvesting, cracking, spraying, and stuffing—and learn effective countermeasures like multi-factor authentication and passkeys to protect your systems.

• YouTube
• 13 minutes
• On-Demand
• Free Video

John Hammond

How Hackers Steal Passwords

Discover how cybercriminals exploit vulnerabilities to steal passwords, with insights into DPAPI abuse techniques and protective measures to safeguard your organization's credentials.

• YouTube
• 23 minutes
• On-Demand
• Free Video

Pass the Hash Techniques for Advanced Network Penetration - Lecture 10

Learn advanced techniques for Pass the Hash attacks, enhancing your penetration testing skills and understanding of network security vulnerabilities.

• YouTube
• 38 minutes
• On-Demand
• Free Video

Black Hat

Crippling HTTPS with Unholy PAC

Explore how malicious Proxy AutoConfiguration can compromise HTTPS security, leak sensitive data, and enable cross-platform attacks, even on secure networks and browsers.

• YouTube
• 44 minutes
• On-Demand
• Conference Talk

Black Hat

Continuous Intrusion - Why CI Tools Are An Attacker's Best Friends

Explore how CI tools can be exploited for attacks, including command execution, credential theft, and privilege escalation, with live demonstrations on popular open-source and proprietary platforms.

• YouTube
• 1 hour
• On-Demand
• Conference Talk

RSA Conference

Hacking Exposed - Real-World Tradecraft of Bears, Pandas and Kittens

Explore real-world hacking techniques used by nation-state actors, including initial infection, privilege escalation, credential theft, persistence, and exfiltration. Learn mitigation strategies from high-profile case studies.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

USENIX Enigma Conference

Anatomy of Account Takeover - Understanding Threats and Defenses

Explore account takeover threats, defense strategies, and challenges in identity protection. Learn about risk detection, login challenges, and the evolving landscape of online security.

• YouTube
• 17 minutes
• On-Demand
• Free Video

IEEE

Cloak and Dagger - From Two Permissions to Complete Control of the UI Feedback Loop

Uncovers Android security flaws allowing malicious apps to control UI feedback loop, enabling stealthy attacks like credential theft and unauthorized app installations without user awareness.

• YouTube
• 23 minutes
• On-Demand
• Free Video