BEGIN:VCALENDAR
VERSION:2.0
PRODID:Data::ICal 0.24
BEGIN:VEVENT
DESCRIPTION:   'Title: Yet Another Walking Dead of Active Directory\n   Tag
 s: Adversary Village | Creator Talk/Panel\n   When: Friday\, Aug 7\, 12:00
  - 12:30 PDT\n   Where: LVCCW Level 1 Hall 3 1105 (Creator Stage 3) - [1]M
 ap\n\n   Description:\n\n   Disabled Active Directory accounts are commonl
 y treated as harmless\n   remnants of the past. In reality\, many of these
  “dead” objects\n   still retain dangerous inbound permissions\, histo
 rical privilege\n   artifacts\, inherited ACL relationships\, and hidden a
 ttack paths that\n   most organizations never investigate.\n\n   This talk
  demonstrates how disabled users\, computers\, and service\n   accounts ca
 n still become active participants in privilege escalation\n   chains thro
 ugh misconfigured DACLs\, AdminSDHolder side effects\, nested\n   group in
 heritance\, and delegated permissions. Through a real-world\n   inspired c
 ase study\, attendees will learn how a seemingly\n   low-privileged user l
 everaged hidden rights over a disabled account to\n   move toward Domain A
 dmin in a mature enterprise environment.\n\n   The presentation also intro
 duces LazarusWakeUp\, a tool designed to\n   identify and analyze disabled
  Active Directory principals with\n   dangerous inbound relationships\, he
 lping operators uncover hidden\n   privilege escalation paths involving fo
 rgotten identities that\n   traditional enumeration techniques and BloodHo
 und analysis may\n   overlook.\n\n   Additionally\, the talk presents a ne
 w perspective on Active Directory\n   Recycle Bin abuse and object resurre
 ction\, showing how deleted\n   identities may continue to create security
  risks even after\n   organizations believe they have been removed entirel
 y.\n\n   SpeakerBio:  Nikos "nickvourd" Vourdas\, EY\n\n   Nikos Vourdas\,
  also known as nickvourd or NCV\, is a Senior Offensive\n   Security Consu
 ltant based in the US. With over five years of\n   professional experience
 \, he has actively participated in various\n   global Tiber-EU and iCAST R
 ed Teaming engagements. Nikos has conducted\n   full Red Teaming operation
 s to major clients across retail\, banking\,\n   shipping\, construction i
 ndustries. He holds OSCE3\, OSCP\, OSWP\, CRTL\,\n   CRTO and OASP certifi
 cations. Also\, he has previously presented at DEF\n   CON\, DevSecCon\, a
 nd various BSides events around the world. Nikos\n   loves contributing to
  open-source projects and always starts his day\n   at 05:00 AM with a ref
 reshing jog while listening to French rap music.\n\n   '\n\n   1. #LVCCW_L
 evel1_Hall3\n\n\n
DTEND:20260807T193000Z
DTSTART:20260807T190000Z
LOCATION:Adversary Village - LVCCW Level 1 Hall 3 1105 (Creator Stage 3)
SUMMARY:Yet Another Walking Dead of Active Directory
END:VEVENT
END:VCALENDAR