Back to Newsletter Archive

Having trouble seeing this email. View it online.
Sword & Shield - Intelligent Security
Security Solutions for Peace of MindMay 2015
Always Factor in IT Security
Managed Security Services Lets You Factor IT Security Into all Your Business Decisions
In days of yore, empires were protected by high, stone walls that worked to keep intruders at bay.

But once cannons were made that could blast steel into those walls, crushing the stone to smithereens, the fortress no longer worked as a sole protection method.

So can one IT security product or service protect the entirety of your business empire?

Most likely not.

Both your internal and external environments do not remain static: changes made by either your business needs or by the increase and sophistication of external threats mean that you need to respond quickly to these changes or risk a security breach.

For some organizations, hiring a dedicated IT security team to respond to these changes is practical, but for most small to mid-sized businesses, the expense of hiring these professionals would be budget-busting, if not financially impossible.

SMBs also struggle with the ability to prioritize security needs for resource allocation because of their limited budgets and expertise.

If you could just access an entire team of security professionals for less than the cost of one...

Now you can.

A Managed Security Solutions Provider (MSSP) will help you quickly, easily and cost effectively deploy all the security controls you need to detect, analyze, log, monitor and react to threats, ensuring that your most important IT assets are always protected.

"The biggest advantage of our MSSP is that we are an extension of the IT department of our clients," said Sword & Shield Director of Managed Services Brent Cantrell. "We are actively monitoring the Internet connections and reviewing system and firewall logs. We detect and respond to malicious activity on an ongoing basis 24x7 helping to protect the assets, network and data of our clients. Being able to provide instant feedback and review, test and patch vulnerable systems keeps the bad hatters at bay."

Sword & Shield's team will help you ensure that security and compliance continue to be factored into business and technology decisions, while controlling your budget. The predictable monthly fee allows you to manage cost as an operating expense and eliminates the need for an additional head-count or stretching your current IT staff­ too thin.

"The number one requirement and most often overlooked is the constant real-time monitoring and review of logs by trained security analysts," Cantrell said. "It is costly for any company to bring these specialized IT resources; they require constant training and certifications to ensure they are kept with the latest threats in the industry. Our MSSP provides 24 x 7 covers for a fraction of the cost of a single security analyst."

Contact us at 865-244-3500 or secureme@swordshield.com to discuss how we can help secure your future.
Security Lab: Dumping a Domain's Worth of Passwords with Mimitkatz Part 3
Before you go any farther into this post, please note this entire attack depends on already having obtained a shared local admin or domain admin credentials. If you only have a shared local admin password, this can land you domain admin credentials. In my case, I already had domain admin credentials, this attack landed me forest admin creds.

This method rides on the coat tails of the work done by @JosephBialek, @mubix, @harmj0y, and @gentilkiwi. I was having trouble getting Veil PowerTool's Invoke-MassMimikatz PowerShell script working, likely to keyboard actuator problems. I also didn't want to go changing my registry settings or install a new program to do a mass Mimikatz attack. This post details the path that I chose to use for collecting creds from a network using Mimikatz.

See More
Alien Vault Certified Systems Engineer Training
Register for our June 15-19 Alien Vault Certified Systems Engineer training held at our Knoxville office or online.

Operators with their ACSE certificate are highly valuable to government, MSSP and Enterprise employers around the world. With an ACSE on staff, Alien Vault customers will experience greater return on investment, better security and more efficient operational control.

Register here