Active Directory Security Assessment

In any microsoft windows ecosystem active directory is critical for identity management authentication authorization security and operations in part because the configuration of ad settings affects multiple information systems through group policy.

Active directory security assessment.

The active directory security assessment adsa is based on our extensive incident response experience global containment and remediation services and emerging threat intelligence. Active directory plays a critical role in today s enterprise it environments. The adsr is a lighter version of our active directory security assessment for smaller single domain forests and is focused on the most common ad security issues. Trimarc performs an active directory security assessment adsa at the customer s site or remotely as appropriate in order to assess known security configuration issues.

The active directory security assessment is designed to provide you specific actionable guidance to mitigate security risks to your active directory and your organization. Illumant uses automated gpo settings analysis tools along with manual reviews of the findings and the domain. The adsr is not as in depth or comprehensive as our active directory security assessment offering and the engagement timeline is 2 weeks vs 4 to 6 weeks for the adsa. Active directory security assessment adsa in depth review of active directory configuration and gpo settings that drive security for in scope domains and their affiliated ous groups computers users and service accounts.

Mandiant uses our expertise to help your organization improve the key processes configuration standards security and monitoring controls required to effectively. This solution also provides you with status on your progress relative to microsoft s recommended roadmap for securing privilege access spa of which active directory is a. Rap as a service is a delivery experience to enable you to assess your environment at your convenience. The active directory assessment provides you with an assessment of your active directory environment with domain controllers running on premises on azure vms or on amazon web services aws vms.

Thinking an active directory domain is the security boundary. The data is collected remotely allowing you to maintain the utmost privacy and run the assessment on your own schedule. The adsa involves document review discussions with staff running scripts and tools and or manual review of the active directory. Submission of data through the cloud and viewing results on our online portal uses encryption to help protect your data.

These assessments use microsoft azure log analytics which is designed to give you simplified it and security management across your environment.