home.aspx
 
. Resources/Whitepapers/4832a93d-2140-4f53-9965-5758d88a1bc0_TenActi_wp.pdf
whitepaper
TEN ACTIVE DIRECTORY MISCONFIGURATIONS THAT LEAD TO TOTAL DOMAIN COMPROMISE
Introduction: Active Directory Security Risks Why is Microsoft Active Directory (AD) the business world’s most targeted asset? Because with just a few queries to AD from a compromised endpoint, attackers obtain all the information they need to steal domain admin credentials and move laterally to high-value assets. Put another way: Attackers gain control of an organization’s vital assets simply by compromising a single domain-connected endpoint. The AD database exposes all identities and resources on the corporate network to any domain-connected user; AD authorizes users (whether legitimate or nefarious) to use its built-in query capability to locate sensitive information. DOWNLOAD