Active Directory Security Assessment
The path nearly every ransomware crew uses to win.
What you get Protect the keys to the kingdom so one compromised host doesn’t become the whole company.
The service
We audit your Active Directory and Entra ID for the paths that lead to full control: Kerberoasting, delegation abuse, escalation through misconfigured permissions, and tiering failures. The same paths ransomware operators exploit.
When do you need it?
If your identity runs on AD and it has never been reviewed by a specialized offensive team.
What’s included
Coverage
Standards & frameworks
How we work
Graph Collection
We collect the graph with BloodHound and SharpHound from a standard user account: users, groups, ACLs, and active sessions.
Ready to get started?
We define scope and objectives on a short, no-obligation call. You receive a proposal tailored to your organization.
- Pillar
- Offensive
- Area
- Infrastructure & Network
- Deliverables
- 4
- Closeout
- Retest included
We respond within one business day.
Frequently asked questions
No, and that’s exactly the point. We start with a standard user account, like any employee’s, and the goal is to show whether that account can get all the way to Domain Admin.
