Active Directory has become the primary target of attackers who stealthily raid companies’ most vital assets. Our industry wrongly models advanced attacks as flows that begin outside your organization, fly through networks and endpoints to eventually reach your data and vital assets. Unfortunately, this model ignores the obvious, all-powerful overseer that orchestrates literally everything in your IT infrastructure: Active Directory. Which, as a consequence, receives too little attention from IT security specialists. However, if AD is given the attention that it deserves, we can reduce the attack surface and reduce the successful attacks. This is completed with a radical change in how we approach AD security. In this session, Derek Melber will describe zero trust and how a change in thinking can allow for a rock solid AD security environment.