| Developers: | Microsoft |
| Date of the premiere of the system: | May 2021 |
| Branches: | Information technologies |
| Technology: | IB - Authentication, PAM Privileged Access Management, IB - Firewalls, IB - Information Leakage Prevention, IB - Fraud Detection System (phrod), IB - Security Information and Event Management (SIEM) |
2021: Announcement of a free tool for testing the security of systems against cyber attacks
At the end of May 2021, Microsoft introduced a free open source test lab environment that allows cybersecurity specialists to check the protective features of 365 Defender, Azure Defender and Azure Sentinel against real cyber attacks.
The tool SimuLand created to analyze the behavior of cybercriminals, determine how to protect computer systems, accelerate the development and launch of laboratory environments for threat research, as well as to inform IB experts about relevant technologies and tools of criminals, detect, document and exchange relevant data sources for modeling and detection of hackers.
So far, the only laboratory environment available for launch allows IB experts to test and improve protection against Golden SAML attacks, in which hackers attack the Microsoft Active Director Federation Services (AD FS) authentication system.
According to Microsoft, its tool allows researchers to "model the behavior of an attacker intending to steal an AD FS token signature certificate from a" local "AD FS server in order to sign a SAML token, impersonate a privileged user and eventually collect mail data through the Microsoft Graph API.
In the future, in addition to expanding the laboratory environment and adding new attack scenarios to it, Microsoft plans to implement in SimuLand support for automating attacks through the Azure Functions cloud system, exporting and sharing telemetry, integrating Microsoft Defender evaluation labs, and deploying and maintaining infrastructure through CI/CD pipelines with Azure DevOps.
To test the capabilities of the new tool, SimuLand users need an Azure client and at least a Microsoft 365 E5 license (paid or trial). [1]
Notes
| The site content is translated by machine translation software powered by PROMT. The machine-translated articles are not always perfect and may contain errors in vocabulary, syntax or grammar. Read original article If you find inaccuracies or errors in the results of machine translation, please write to editor@tadviser.ru. We will make every effort to correct them as soon as possible. |