Active Directory Configuration Review

We review your Active Directory design and settings for the misconfigurations attackers use to take over a domain.

All services

// Overview

What this service is.

Active Directory is at the center of most enterprise attacks. Our review examines configuration, delegation, privileged access and trust relationships, informed by how we compromise domains in real engagements.

The result is a prioritized list of changes that most reduce your risk.

// Scope

Scope and coverage.

  • Privileged account and group exposure
  • Delegation and permission weaknesses
  • Authentication and credential protection settings
  • Certificate services and trust relationships
  • Group policy and legacy configuration
// Deliverables

What you get.

  • Prioritized findings with remediation steps
  • Attack paths explained in plain language
  • Executive and technical reporting
  • A debrief with your directory team
// Questions

Frequently asked questions.

Is this a penetration test?

No. It is a configuration review, usually with read-only access.

Does it cover hybrid environments?

Yes. We can include cloud identity connections.

Can it support a later pentest?

Yes. Fixing these issues first makes a pentest more valuable.

// Get started

Ready to scope this engagement?

Tell us what you want to learn and we will help you scope the right engagement.