Adam Georgeson MEMBER_OF The Academy
Adam worked as an IT apprentice and technician at The Academy before being dismissed.
Explicit Confidence 99% · Jack Rhysider EP 113 Details
“The job was to do IT work at the Academy.”
Person
person:adam_georgeson
Also: Adam
Guest whose former employers' networks were accessed and sabotaged as described in the episode.
Guest whose former employers' networks were accessed and sabotaged as described in the episode.
“A big thank-you to Adam Georgeson for sharing this story with us.”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | MEMBER_OF | The Academy | Explicit | 113 |
| outgoing | EXPLOITS | shared local administrator password | Explicit | 113 |
| outgoing | EXPLOITS | weak and reused administrative passwords | Explicit | 113 |
| outgoing | USES | Office 365 | Explicit | 113 |
| outgoing | USES | VPN | Explicit | 113 |
| outgoing | USES | password guessing | Explicit | 113 |
| outgoing | USES | privilege escalation | Explicit | 113 |
| outgoing | USES | credentialed remote access | Explicit | 113 |
| outgoing | USES | IP scanning | Explicit | 113 |
| outgoing | USES | lateral movement | Explicit | 113 |
Adam Georgeson MEMBER_OF The Academy
Adam worked as an IT apprentice and technician at The Academy before being dismissed.
Explicit Confidence 99% · Jack Rhysider EP 113 Details
“The job was to do IT work at the Academy.”
Adam Georgeson EXPLOITS shared local administrator password
Adam exploited the Academy’s use of the same local administrator password on all student computers.
Explicit Confidence 99% · Adam Georgeson EP 113 Details
“it was the same one at every single computer in the school”
Adam Georgeson EXPLOITS weak and reused administrative passwords
Adam exploited weak, reused, and patterned administrative passwords, including the domain administrator password.
Explicit Confidence 99% · Jack Rhysider EP 113 Details
“he guessed what the domain admin password was”
Adam Georgeson USES Office 365
Adam used the Academy’s Office 365 administrator portal to access accounts and administrative functions.
Explicit Confidence 99% · Jack Rhysider EP 113 Details
“I was logged into the school’s admin portal on Office 365.”
Adam Georgeson USES VPN
Adam used the Academy’s VPN to connect to its internal network from home.
Explicit Confidence 99% · Jack Rhysider EP 113 Details
“I successfully VPNs into the school’s network”
Adam Georgeson USES password guessing
Adam guessed Office 365 and VPN passwords by following the Academy’s password patterns.
Explicit Confidence 99% · Jack Rhysider EP 113 Details
“After a few hours at guessing VPN passwords, he finally gets it.”
Adam Georgeson USES privilege escalation
Adam escalated from a lower-level Office 365 account to an account with super-administrator rights.
Explicit Confidence 99% · Jack Rhysider EP 113 Details
“He’s done what’s called privilege escalation.”
Adam Georgeson USES credentialed remote access
Adam used saved credentials and Remote Desktop connections to access additional computers and servers.
Explicit Confidence 98% · Adam Georgeson EP 113 Details
“there was sort of saved credentials”
Adam Georgeson USES IP scanning
Adam used an IP scanner to enumerate computers on the Academy’s network.
Explicit Confidence 99% · Jack Rhysider EP 113 Details
“uses an IP scanner to get a lay of the land”
Adam Georgeson USES lateral movement
Adam moved from one computer to another across the Academy’s network to reach infrastructure systems.
Explicit Confidence 99% · Jack Rhysider EP 113 Details
“Adam kept hopping from one system to another”