Securing Active Directory - Attivo Networks
Attivo Networks Blogs

Securing Active Directory

Active Directory (AD) is a standard tool used by most organizations to regulate users and machines accessing the company’s resources. However, it can be both a blessing and a curse: as the central repository for all the information relating to the network – credentials, users, computers, applications, and so on – AD is essential to the day-to-day running of the business.

Every computer on the company’s network must, therefore, have some level of access to AD for the network environment to function correctly.

Having all this information in one place, however, means it is also a highly prized target for threat actors, as any compromised endpoint gives an attacker access to this central repository. Once attackers compromise AD, they can gain insight and access to the network, providing them with critical information on which accounts to target so that they can advance their attack. Defenders know this and have tried to craft secure practices to protect AD.

These best practices include having separate administrator accounts per person and tiers of access to limit the ability of a single compromised account to create havoc. In addition to these best practices, they also run Red Team exercises, and other forms of monitoring to look for anomalous behaviours. It is inherently tricky balancing this need for with preventing unauthorized access. As such, it is hard to lock down an AD server from an attacker using automated tools that can quickly enumerate it and find the information they are seeking.

Read the full article by Carolyn Crandall in InfoSecurity Magazine.

Share on:

Free Active Directory Assessment

Get Visibility Into Privilege And Service Account Exposure

For a limited time, Attivo Networks is providing free Active Directory Security Assessments to demonstrate how ADAssessor provides unprecedented and continuous visibility to AD vulnerabilities.

Try Our Endpoint Detection Net (EDN) for Free

FAST AND EASY

Free use offer of our Award-winning security solution to prevent attackers from lateral movement, credential theft, and privilege escalation, fast and easy.

Newsletter Signup

    Yes, please opt me in to receive your quarterly newsletter, event invitations, and product updates.

    I understand that I can opt out at any time, and can refer to Attivo Networks Privacy Policy for more information.
  • This field is for validation purposes and should be left unchanged.

ADSecure 90-Day Free Trial

GET PROTECTION AGAINST UNAUTHORIZED ACCESS TO ACTIVE DIRECTORY

  • Hide and deny access to AD objects
  • Get alerted on unauthorized queries
  • Attack details easily viewable in dashboard
  • Your data remains on-premise

RSS

Leave a Comment

Your email address will not be published. Required fields are marked *

4 × 1 =

Ready to find out what’s lurking in your network?

Scroll to Top