Don’t let Active Directory
become your Achilles heel.

AD is the lifeblood of modern networks, and without it, the whole organization can grind to a halt.

Attackers target the system to access and obtain new credentials to help them move laterally in the network.

Its progressive nature and the complex security framework gives an unfair advantage to attackers.

Based on observations made during incident response assignments and penetration test assignments, we can confirm that the IT criminals put significant effort towards attacking Active Directory.

ESSENTIAL CHECK

25 essential controls to see if the Active Directory follows the most widely accepted best practices and ensures that attackers cannot obtain access with most used attack tools.

Examples of controls:

• Credential stealing and account takeover
• Misconfiguration of privileged users
• Kerberoasting of privileged users
• Hardening of Enterprise, Domain and Local Adminstrators
• Access Control List misconfigurations
• Strong password policies
• Best practice audit logging
• Domain & forest functional levels

EXTENDED CHECK 

A further 75 controls gives you a more in-depth analysis and better coverage of your security posture. The result leaves you with a healthy level of security that can withstand even skilled attackers.

Examples of additional controls:

• Protections against advanced credential-stealing attacks
• Unconstrained delegation analysis
• Protections against Golden and Silver Ticket attacks
• Legacy protocols and broken cryptography primitives
• Implanted malicious accounts and Shadow Administrator activity
• Analyzing group policies for credential leaks
• Best practices in architecture such as Administrative Tier Model and Enhanced Security Administrative Environment (ESAE)
• Control path analysis