ADAssessor for Active Directory Security

Active Directory is one of the main targets of attack because it contains the required information that attackers need to expand their access, establish persistence, elevate privileges, move laterally, and identify targets to attack. By identifying critical AD exposures and alerting on attacks that target them, organizations improve their security before attackers can compromise their AD data.

In addition to real-time attack detection, the solution also provides visibility into critical domain, computer, and user-level exposures. These insights easily show identities and service account risk related to credentials, privileged accounts, stale accounts, shared credentials, and AD attack paths. The solution gathers this information efficiently from the domain, so it does not impact day to day Active Directory operations or employee access to resources.

A Solution to Identify and Remediate Active Directory Security Hygiene Issues.

The goals of the ADAssessor product:

EARLY - Detect unauthorized Active Directory queries in real-time

VISIBILITY - Identify Active Directory security hygiene issues on an ongoing basis

CONDITIONAL ACCESS - Granularly restrict Active Directory information access without impacting business operations

ACTIONABLE - Gain substantiated alerts for key exposures at the domain, computer, and user level

COMPREHENSIVE - Get full coverage for on-premises and multi-cloud environments

CONTINUOUS - Achieve constant visibility into identities and service account risks

How ADAssessor for Active Directory Protection Works

Organizations can set up the ADAssessor solution through a single domain-joined system. There are no extra privileges required. The cloud-based management console is then accessed through an Attivo CloudLink service.

Once deployed, the solution:

Detects vulnerabilities in the AD environment, including misconfigurations, excessive privileges, or data exposures.
Discovers weaknesses before attackers can exploit them and to reduce the attack surface.
Automatically monitors AD, analyzing changes and new exposures that indicate possible malicious activity.
Runs continuously or on-demand to protect Active Directory.

ADAssessor

What is ADAssessor?

Categories & Use Cases

Videos