Tier Zero: What It Is, Its Importance, Its Boundaries, and Detecting Out-of-Bounds Activity

6/30/2022 12:00:00 PM [(UTC-05:00) Eastern Time (US & Canada)] - Can't make the live event? Register anyway to receive a link to the recording.

Other Time Zones

GMT Standard Time-(UTC+00:00) Dublin, Edinburgh, Lisbon, London    6/30/2022 5:00:00 PM
Show/Hide All Time Zones

All Time Zones

Dateline Standard Time-(UTC-12:00) International Date Line West 6/30/2022 4:00:00 AM
UTC-11-(UTC-11:00) Coordinated Universal Time-11 6/30/2022 5:00:00 AM
Aleutian Standard Time-(UTC-10:00) Aleutian Islands 6/30/2022 7:00:00 AM
Hawaiian Standard Time-(UTC-10:00) Hawaii 6/30/2022 6:00:00 AM
Marquesas Standard Time-(UTC-09:30) Marquesas Islands 6/30/2022 6:30:00 AM
Alaskan Standard Time-(UTC-09:00) Alaska 6/30/2022 8:00:00 AM
UTC-09-(UTC-09:00) Coordinated Universal Time-09 6/30/2022 7:00:00 AM
Pacific Standard Time (Mexico)-(UTC-08:00) Baja California 6/30/2022 9:00:00 AM
UTC-08-(UTC-08:00) Coordinated Universal Time-08 6/30/2022 8:00:00 AM
Pacific Standard Time-(UTC-08:00) Pacific Time (US & Canada) 6/30/2022 9:00:00 AM
US Mountain Standard Time-(UTC-07:00) Arizona 6/30/2022 9:00:00 AM
Mountain Standard Time (Mexico)-(UTC-07:00) Chihuahua, La Paz, Mazatlan 6/30/2022 10:00:00 AM
Mountain Standard Time-(UTC-07:00) Mountain Time (US & Canada) 6/30/2022 10:00:00 AM
Yukon Standard Time-(UTC-07:00) Yukon 6/30/2022 9:00:00 AM
Central America Standard Time-(UTC-06:00) Central America 6/30/2022 10:00:00 AM
Central Standard Time-(UTC-06:00) Central Time (US & Canada) 6/30/2022 11:00:00 AM
Easter Island Standard Time-(UTC-06:00) Easter Island 6/30/2022 10:00:00 AM
Central Standard Time (Mexico)-(UTC-06:00) Guadalajara, Mexico City, Monterrey 6/30/2022 11:00:00 AM
Canada Central Standard Time-(UTC-06:00) Saskatchewan 6/30/2022 10:00:00 AM
SA Pacific Standard Time-(UTC-05:00) Bogota, Lima, Quito, Rio Branco 6/30/2022 11:00:00 AM
Eastern Standard Time (Mexico)-(UTC-05:00) Chetumal 6/30/2022 11:00:00 AM
Eastern Standard Time-(UTC-05:00) Eastern Time (US & Canada) 6/30/2022 12:00:00 PM
Haiti Standard Time-(UTC-05:00) Haiti 6/30/2022 12:00:00 PM
Cuba Standard Time-(UTC-05:00) Havana 6/30/2022 12:00:00 PM
US Eastern Standard Time-(UTC-05:00) Indiana (East) 6/30/2022 12:00:00 PM
Turks And Caicos Standard Time-(UTC-05:00) Turks and Caicos 6/30/2022 12:00:00 PM
Paraguay Standard Time-(UTC-04:00) Asuncion 6/30/2022 12:00:00 PM
Atlantic Standard Time-(UTC-04:00) Atlantic Time (Canada) 6/30/2022 1:00:00 PM
Venezuela Standard Time-(UTC-04:00) Caracas 6/30/2022 12:00:00 PM
Central Brazilian Standard Time-(UTC-04:00) Cuiaba 6/30/2022 12:00:00 PM
SA Western Standard Time-(UTC-04:00) Georgetown, La Paz, Manaus, San Juan 6/30/2022 12:00:00 PM
Pacific SA Standard Time-(UTC-04:00) Santiago 6/30/2022 12:00:00 PM
Newfoundland Standard Time-(UTC-03:30) Newfoundland 6/30/2022 1:30:00 PM
Tocantins Standard Time-(UTC-03:00) Araguaina 6/30/2022 1:00:00 PM
E. South America Standard Time-(UTC-03:00) Brasilia 6/30/2022 1:00:00 PM
SA Eastern Standard Time-(UTC-03:00) Cayenne, Fortaleza 6/30/2022 1:00:00 PM
Argentina Standard Time-(UTC-03:00) City of Buenos Aires 6/30/2022 1:00:00 PM
Greenland Standard Time-(UTC-03:00) Greenland 6/30/2022 2:00:00 PM
Montevideo Standard Time-(UTC-03:00) Montevideo 6/30/2022 1:00:00 PM
Magallanes Standard Time-(UTC-03:00) Punta Arenas 6/30/2022 1:00:00 PM
Saint Pierre Standard Time-(UTC-03:00) Saint Pierre and Miquelon 6/30/2022 2:00:00 PM
Bahia Standard Time-(UTC-03:00) Salvador 6/30/2022 1:00:00 PM
UTC-02-(UTC-02:00) Coordinated Universal Time-02 6/30/2022 2:00:00 PM
Mid-Atlantic Standard Time-(UTC-02:00) Mid-Atlantic - Old 6/30/2022 3:00:00 PM
Azores Standard Time-(UTC-01:00) Azores 6/30/2022 4:00:00 PM
Cape Verde Standard Time-(UTC-01:00) Cabo Verde Is. 6/30/2022 3:00:00 PM
UTC-(UTC) Coordinated Universal Time 6/30/2022 4:00:00 PM
GMT Standard Time-(UTC+00:00) Dublin, Edinburgh, Lisbon, London 6/30/2022 5:00:00 PM
Greenwich Standard Time-(UTC+00:00) Monrovia, Reykjavik 6/30/2022 4:00:00 PM
Sao Tome Standard Time-(UTC+00:00) Sao Tome 6/30/2022 4:00:00 PM
Morocco Standard Time-(UTC+01:00) Casablanca 6/30/2022 5:00:00 PM
W. Europe Standard Time-(UTC+01:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna 6/30/2022 6:00:00 PM
Central Europe Standard Time-(UTC+01:00) Belgrade, Bratislava, Budapest, Ljubljana, Prague 6/30/2022 6:00:00 PM
Romance Standard Time-(UTC+01:00) Brussels, Copenhagen, Madrid, Paris 6/30/2022 6:00:00 PM
Central European Standard Time-(UTC+01:00) Sarajevo, Skopje, Warsaw, Zagreb 6/30/2022 6:00:00 PM
W. Central Africa Standard Time-(UTC+01:00) West Central Africa 6/30/2022 5:00:00 PM
Jordan Standard Time-(UTC+02:00) Amman 6/30/2022 7:00:00 PM
GTB Standard Time-(UTC+02:00) Athens, Bucharest 6/30/2022 7:00:00 PM
Middle East Standard Time-(UTC+02:00) Beirut 6/30/2022 7:00:00 PM
Egypt Standard Time-(UTC+02:00) Cairo 6/30/2022 6:00:00 PM
E. Europe Standard Time-(UTC+02:00) Chisinau 6/30/2022 7:00:00 PM
Syria Standard Time-(UTC+02:00) Damascus 6/30/2022 7:00:00 PM
West Bank Standard Time-(UTC+02:00) Gaza, Hebron 6/30/2022 7:00:00 PM
South Africa Standard Time-(UTC+02:00) Harare, Pretoria 6/30/2022 6:00:00 PM
FLE Standard Time-(UTC+02:00) Helsinki, Kyiv, Riga, Sofia, Tallinn, Vilnius 6/30/2022 7:00:00 PM
Israel Standard Time-(UTC+02:00) Jerusalem 6/30/2022 7:00:00 PM
South Sudan Standard Time-(UTC+02:00) Juba 6/30/2022 6:00:00 PM
Kaliningrad Standard Time-(UTC+02:00) Kaliningrad 6/30/2022 6:00:00 PM
Sudan Standard Time-(UTC+02:00) Khartoum 6/30/2022 6:00:00 PM
Libya Standard Time-(UTC+02:00) Tripoli 6/30/2022 6:00:00 PM
Namibia Standard Time-(UTC+02:00) Windhoek 6/30/2022 6:00:00 PM
Arabic Standard Time-(UTC+03:00) Baghdad 6/30/2022 7:00:00 PM
Turkey Standard Time-(UTC+03:00) Istanbul 6/30/2022 7:00:00 PM
Arab Standard Time-(UTC+03:00) Kuwait, Riyadh 6/30/2022 7:00:00 PM
Belarus Standard Time-(UTC+03:00) Minsk 6/30/2022 7:00:00 PM
Russian Standard Time-(UTC+03:00) Moscow, St. Petersburg 6/30/2022 7:00:00 PM
E. Africa Standard Time-(UTC+03:00) Nairobi 6/30/2022 7:00:00 PM
Volgograd Standard Time-(UTC+03:00) Volgograd 6/30/2022 7:00:00 PM
Iran Standard Time-(UTC+03:30) Tehran 6/30/2022 8:30:00 PM
Arabian Standard Time-(UTC+04:00) Abu Dhabi, Muscat 6/30/2022 8:00:00 PM
Astrakhan Standard Time-(UTC+04:00) Astrakhan, Ulyanovsk 6/30/2022 8:00:00 PM
Azerbaijan Standard Time-(UTC+04:00) Baku 6/30/2022 8:00:00 PM
Russia Time Zone 3-(UTC+04:00) Izhevsk, Samara 6/30/2022 8:00:00 PM
Mauritius Standard Time-(UTC+04:00) Port Louis 6/30/2022 8:00:00 PM
Saratov Standard Time-(UTC+04:00) Saratov 6/30/2022 8:00:00 PM
Georgian Standard Time-(UTC+04:00) Tbilisi 6/30/2022 8:00:00 PM
Caucasus Standard Time-(UTC+04:00) Yerevan 6/30/2022 8:00:00 PM
Afghanistan Standard Time-(UTC+04:30) Kabul 6/30/2022 8:30:00 PM
West Asia Standard Time-(UTC+05:00) Ashgabat, Tashkent 6/30/2022 9:00:00 PM
Ekaterinburg Standard Time-(UTC+05:00) Ekaterinburg 6/30/2022 9:00:00 PM
Pakistan Standard Time-(UTC+05:00) Islamabad, Karachi 6/30/2022 9:00:00 PM
Qyzylorda Standard Time-(UTC+05:00) Qyzylorda 6/30/2022 9:00:00 PM
India Standard Time-(UTC+05:30) Chennai, Kolkata, Mumbai, New Delhi 6/30/2022 9:30:00 PM
Sri Lanka Standard Time-(UTC+05:30) Sri Jayawardenepura 6/30/2022 9:30:00 PM
Nepal Standard Time-(UTC+05:45) Kathmandu 6/30/2022 9:45:00 PM
Central Asia Standard Time-(UTC+06:00) Astana 6/30/2022 10:00:00 PM
Bangladesh Standard Time-(UTC+06:00) Dhaka 6/30/2022 10:00:00 PM
Omsk Standard Time-(UTC+06:00) Omsk 6/30/2022 10:00:00 PM
Myanmar Standard Time-(UTC+06:30) Yangon (Rangoon) 6/30/2022 10:30:00 PM
SE Asia Standard Time-(UTC+07:00) Bangkok, Hanoi, Jakarta 6/30/2022 11:00:00 PM
Altai Standard Time-(UTC+07:00) Barnaul, Gorno-Altaysk 6/30/2022 11:00:00 PM
W. Mongolia Standard Time-(UTC+07:00) Hovd 6/30/2022 11:00:00 PM
North Asia Standard Time-(UTC+07:00) Krasnoyarsk 6/30/2022 11:00:00 PM
N. Central Asia Standard Time-(UTC+07:00) Novosibirsk 6/30/2022 11:00:00 PM
Tomsk Standard Time-(UTC+07:00) Tomsk 6/30/2022 11:00:00 PM
China Standard Time-(UTC+08:00) Beijing, Chongqing, Hong Kong, Urumqi 7/1/2022 12:00:00 AM
North Asia East Standard Time-(UTC+08:00) Irkutsk 7/1/2022 12:00:00 AM
Singapore Standard Time-(UTC+08:00) Kuala Lumpur, Singapore 7/1/2022 12:00:00 AM
W. Australia Standard Time-(UTC+08:00) Perth 7/1/2022 12:00:00 AM
Taipei Standard Time-(UTC+08:00) Taipei 7/1/2022 12:00:00 AM
Ulaanbaatar Standard Time-(UTC+08:00) Ulaanbaatar 7/1/2022 12:00:00 AM
Aus Central W. Standard Time-(UTC+08:45) Eucla 7/1/2022 12:45:00 AM
Transbaikal Standard Time-(UTC+09:00) Chita 7/1/2022 1:00:00 AM
Tokyo Standard Time-(UTC+09:00) Osaka, Sapporo, Tokyo 7/1/2022 1:00:00 AM
North Korea Standard Time-(UTC+09:00) Pyongyang 7/1/2022 1:00:00 AM
Korea Standard Time-(UTC+09:00) Seoul 7/1/2022 1:00:00 AM
Yakutsk Standard Time-(UTC+09:00) Yakutsk 7/1/2022 1:00:00 AM
Cen. Australia Standard Time-(UTC+09:30) Adelaide 7/1/2022 1:30:00 AM
AUS Central Standard Time-(UTC+09:30) Darwin 7/1/2022 1:30:00 AM
E. Australia Standard Time-(UTC+10:00) Brisbane 7/1/2022 2:00:00 AM
AUS Eastern Standard Time-(UTC+10:00) Canberra, Melbourne, Sydney 7/1/2022 2:00:00 AM
West Pacific Standard Time-(UTC+10:00) Guam, Port Moresby 7/1/2022 2:00:00 AM
Tasmania Standard Time-(UTC+10:00) Hobart 7/1/2022 2:00:00 AM
Vladivostok Standard Time-(UTC+10:00) Vladivostok 7/1/2022 2:00:00 AM
Lord Howe Standard Time-(UTC+10:30) Lord Howe Island 7/1/2022 2:30:00 AM
Bougainville Standard Time-(UTC+11:00) Bougainville Island 7/1/2022 3:00:00 AM
Russia Time Zone 10-(UTC+11:00) Chokurdakh 7/1/2022 3:00:00 AM
Magadan Standard Time-(UTC+11:00) Magadan 7/1/2022 3:00:00 AM
Norfolk Standard Time-(UTC+11:00) Norfolk Island 7/1/2022 3:00:00 AM
Sakhalin Standard Time-(UTC+11:00) Sakhalin 7/1/2022 3:00:00 AM
Central Pacific Standard Time-(UTC+11:00) Solomon Is., New Caledonia 7/1/2022 3:00:00 AM
Russia Time Zone 11-(UTC+12:00) Anadyr, Petropavlovsk-Kamchatsky 7/1/2022 4:00:00 AM
New Zealand Standard Time-(UTC+12:00) Auckland, Wellington 7/1/2022 4:00:00 AM
UTC+12-(UTC+12:00) Coordinated Universal Time+12 7/1/2022 4:00:00 AM
Fiji Standard Time-(UTC+12:00) Fiji 7/1/2022 4:00:00 AM
Kamchatka Standard Time-(UTC+12:00) Petropavlovsk-Kamchatsky - Old 7/1/2022 5:00:00 AM
Chatham Islands Standard Time-(UTC+12:45) Chatham Islands 7/1/2022 4:45:00 AM
UTC+13-(UTC+13:00) Coordinated Universal Time+13 7/1/2022 5:00:00 AM
Tonga Standard Time-(UTC+13:00) Nuku'alofa 7/1/2022 5:00:00 AM
Samoa Standard Time-(UTC+13:00) Samoa 7/1/2022 5:00:00 AM
Line Islands Standard Time-(UTC+14:00) Kiritimati Island 7/1/2022 6:00:00 AM

Webinar Registration

Every Active Directory environment has Tier 0 systems whether they recognize it or not. Tier 0 systems are those that – if compromised – subsequently the rest of your environment will be compromised because of security dependencies. Tier 0 begins with domain controllers and any other foundation security systems that provide identity, authentication and access control to the rest of your network. That would include:

  • ADFS
  • Multifactor authentication and RADIUS servers
  • Privileged account/session management

But Tier 0 also includes additional systems that foundation security systems like domain controllers depend on for synchronization, management or hosting, including:

  • Azure AD Connect
  • Systems management servers that manage DCs or other Tier 0 systems
  • Hypervisors (and hypervisor management systems) that host Tier 0 systems

Finally, Tier 0 extends to any system where a Tier 0 user account logs on. And that brings us to an important point. Tier 0 isn’t just about systems – it’s equally about user accounts. Tier 0 user accounts are those that have privileged access to any Tier 0 system. So that would include accounts like:

  • Domain Admins
  • Local admin authority on a member server running Azure AD Connect or ADFS
  • Root access on a hyper-visor server hosting domain controller VMs

As soon as a Tier 0 account logs on to a given system, that system essentially becomes Tier 0 even if not intended. That’s because anyone with local admin authority on that system can potentially steal the credentials and/or impersonate that Tier 0 user. So that means Secure Admin Workstations (SAWs) are essential to security. Tier 0 systems and accounts must stay together. But it’s so easy for Tier 0 accounts to get out of bounds.

In this webinar, we will do a deep dive into Tier 0. I’ll show you why it’s so important to recognize Tier 0 for what it is and then identify all systems and accounts that are Tier 0 either directly or indirectly. That can be quite a difficult job because of the complexity of group membership, nested groups, directory synchronization, various permission models, etc. There are so many ways that the bad guys can gain access to Tier 0 assets. As just one example, all it takes is inadvertently assigning someone write permission to the wrong GPO. 

Some of the key MITRE ATT&CK techniques that come into play in our discussion are:

  • T1078 – Valid Accounts
  • 002 – OS Credential Dumping: Security Account Manager
  • T1098 – Account Manipulation

Bryan Patton from our sponsor Quest is using his experience helping customers tackle this problem to help assemble the material for this real training for free session and he will also briefly demonstrate how SpecterOps Bloodhound Enterprise and other Quest technologies can help you uncover the hidden permissions and memberships comprising the true scope of the critical Tier Zero assets in your Active Directory.

Please join us for this real training for free Session.

First Name:   
Last Name:   
Work Email:  
Phone:  
Job Title:  
Organization:  
Country:    
State:  
Zip/Postal Code:  
 

Your information will be shared with the sponsor.

By clicking "Submit", you're agreeing to our Privacy Policy and consenting to be contacted by us and the sponsor.

 

 

Additional Resources