Active Directory is the backbone of most corporate networks.<\/strong> An attacker who gains control of the domain essentially gains control of the entire company. Active Directory is no longer limited to internal IT networks \u2013 it increasingly extends to OT environments and is often closely linked to Azure and Entra ID. Because Active Directory controls authentication and access across your entire organization, it remains a central and critical target for attackers. <\/p>\n[\/vc_column_text][\/vc_column_inner][vc_column_inner column_padding=”padding-3-percent” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”top-bottom” flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/2″ tablet_width_inherit=”default” animation_type=”default” enable_animation=”true” animation=”fade-in-from-bottom” animation_easing=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid” delay=”100″][vc_column_text css=”.vc_custom_1771850580703{padding-right: 10% !important;}” text_direction=”default”]\n As environments evolve – with legacy systems, hybrid configurations and cloud extensions – so do the attack surfaces. Thanks to our many years of experience in the areas of Active Directory and OT, we are able to precisely identify potential attack paths and assess their impact in the real world – whether in IT or OT. In particular, the detection of attack paths that spill over from IT into OT is a central focus of our Active Directory assessments. <\/p>\n[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][divider line_type=”No Line”][\/vc_column][\/vc_row][vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”90px” equal_height=”yes” content_placement=”middle” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” bottom_padding=”5%” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” row_position_desktop=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none” shape_type=”” gradient_type=”default”][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/2″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid” column_padding_type=”default” gradient_type=”default”][split_line_heading line_reveal_by_space_text_effect=”default” font_style=”h3″ text_color=”#123043″ content_alignment=”default” mobile_content_alignment=”inherit” animation_type=”line-reveal-by-space” link_target=”_self” text_content=”Common vulnerabilities in Active Directories” max_width=”520″ text_direction=”default”][\/split_line_heading][vc_column_text css=”.vc_custom_1771850629866{padding-right: 10% !important;}” text_direction=”default”]Active Directory often has security-relevant vulnerabilities, as many environments have grown historically and have never been systematically hardened. This makes them an attractive target for attackers.[\/vc_column_text][vc_row_inner column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” top_padding=”20″ text_align=”left” row_position=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” pointer_events=”all”][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” enable_animation=”true” animation=”fade-in-from-bottom” animation_easing=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”] We simulate the behavior of attackers to uncover vulnerabilities that could put your most important infrastructure at risk – using manual methods and specialized tools that go far beyond automated scans.<\/p>\n[\/vc_column_text][\/vc_column_inner][vc_column_inner column_padding=”padding-1-percent” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”left” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/3″ tablet_width_inherit=”default” animation_type=”default” enable_animation=”true” animation=”fade-in-from-bottom” animation_easing=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid” column_padding_type=”default” gradient_type=”default” content_layout=”default”][nectar_icon icon_family=”iconsmind” icon_style=”soft-bg” icon_color_type=”color_scheme” icon_color=”white” icon_padding=”10px” pointer_events=”all” icon_iconsmind=”iconsmind-Brain” icon_size=”40″][vc_column_text css=”.vc_custom_1771850781068{padding-right: 10% !important;}” text_direction=”default”]\n With many years of experience in both Active Directory and OT, we can accurately evaluate potential attack vectors and assess their true impact across all your Active Directory environments – whether IT or OT.<\/p>\n[\/vc_column_text][\/vc_column_inner][vc_column_inner column_padding=”padding-1-percent” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”left” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/3″ tablet_width_inherit=”default” animation_type=”default” enable_animation=”true” animation=”fade-in-from-bottom” animation_easing=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid” column_padding_type=”default” gradient_type=”default” content_layout=”default”][nectar_icon icon_family=”iconsmind” icon_style=”soft-bg” icon_color_type=”color_scheme” icon_color=”white” icon_padding=”10px” pointer_events=”all” icon_iconsmind=”iconsmind-Building” icon_size=”40″][vc_column_text css=”.vc_custom_1771850804764{padding-right: 10% !important;}” text_direction=”default”]\n Using an assumed-breach approach, we find out how far attackers can penetrate your Active Directory, regardless of the security of individual clients, e.g. on the basis of an opened phishing email that compromises the client.<\/p>\n[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row type=”full_width_background” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” top_padding=”5%” bottom_padding=”2%” top_padding_tablet=”20%” bottom_padding_tablet=”10%” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” row_position_desktop=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none” shape_type=”” gradient_type=”default”][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_row_inner column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” right_padding_desktop=”20%” text_align=”left” row_position=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” pointer_events=”all”][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][nectar_highlighted_text color_type=”regular” text_color=”#123043″ style=”half_text” text_direction=”default”]\n For small to medium-sized AD environments<\/strong> Scope of services:<\/strong><\/p>\n Automated hardening test<\/p>\n<\/li>\n Vulnerability scan of critical servers (incl. DCs)<\/p>\n<\/li>\n Analysis of user, group and password configurations<\/p>\n<\/li>\n Check for admin abuse (e.g. missing tiering, password reuse)<\/p>\n<\/li>\n Manual attack path modeling (basic)<\/p>\n<\/li>\n AD-CS check (if available)<\/p>\n<\/li>\n Report with results and measures<\/p>\n<\/li>\n<\/ul>\n Ideal as a starting point for improving your AD security<\/strong><\/p>\n <\/div>[\/vc_column_inner][\/vc_row_inner][\/tab][tab icon_family=”iconsmind” title=”Advanced Test” id=”1773737403374-7″ tab_id=”1773737403374-2″][vc_row_inner equal_height=”yes” column_margin=”40px” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” text_align=”left” row_position=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” pointer_events=”all”][vc_column_inner top_padding_desktop=”40″ constrain_group_100=”yes” bottom_padding_desktop=”40″ left_padding_desktop=”40″ constrain_group_101=”yes” right_padding_desktop=”40″ flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”10px” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color=”#efefef” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” font_color=”#000000″ column_shadow=”custom” column_border_radius=”15px” column_link_target=”_self” zindex=”100″ overflow=”hidden” advanced_gradient_angle=”0″ gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid” gradient_type=”default” padding_type=”advanced” column_padding_type=”advanced” column_shadow_custom=”” custom_box_shadow=”horizontal:40,vertical:60,blur:60,spread:-20,opacity:0.175″] For medium to large environments<\/strong> Scope of services:<\/strong><\/p>\n All contents of the Essential Test<\/p>\n<\/li>\n Advanced attack path modeling (manual)<\/p>\n<\/li>\n Basic check of shared network content<\/p>\n<\/li>\n Initial assessment of MS SQL, ConfigMgr and Entra Connect (if available)<\/p>\n<\/li>\n Detailed report with prioritization<\/p>\n<\/li>\n<\/ul>\n Optional add-ons:<\/strong><\/p>\n Password analysis<\/p>\n<\/li>\n Trust analysis for multiple domains<\/p>\n<\/li>\n<\/ul>\n Ideal for validating measures or gaining a deeper understanding of risk<\/strong><\/p>\n <\/div>[\/vc_column_inner][\/vc_row_inner][\/tab][tab icon_family=”iconsmind” title=”Comprehensive Test” id=”1773737403402-4″ tab_id=”1773737403402-2″][vc_row_inner equal_height=”yes” column_margin=”40px” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” text_align=”left” row_position=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” pointer_events=”all”][vc_column_inner top_padding_desktop=”40″ constrain_group_100=”yes” bottom_padding_desktop=”40″ left_padding_desktop=”40″ constrain_group_101=”yes” right_padding_desktop=”40″ flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”10px” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color=”#efefef” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” font_color=”#000000″ column_shadow=”custom” column_border_radius=”15px” column_link_target=”_self” zindex=”100″ overflow=”hidden” advanced_gradient_angle=”0″ gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid” gradient_type=”default” padding_type=”advanced” column_padding_type=”advanced” column_shadow_custom=”” custom_box_shadow=”horizontal:40,vertical:60,blur:60,spread:-20,opacity:0.175″] For complex AD environments with multiple domains or forests<\/strong> Scope of services:<\/strong><\/p>\n all content from Essential & Advanced<\/p>\n<\/li>\n Comprehensive attack path modeling<\/p>\n<\/li>\n Extended tests of supporting systems (e.g. MS SQL, ConfigMgr)<\/p>\n<\/li>\n Detailed analysis of intra-\/inter-forest trusts<\/p>\n<\/li>\n Complete report with concrete recommendations for action<\/p>\n<\/li>\n<\/ul>\n Optional add-ons:<\/strong><\/p>\n Password analysis<\/p>\n<\/li>\n Azure AD \/ Hybrid Identity Assessment<\/p>\n<\/li>\n<\/ul>\n Ideal for companies with high security requirements or compliance targets<\/strong><\/p>\n <\/div>[\/vc_column_inner][\/vc_row_inner][\/tab][\/tabbed_section][\/vc_column][\/vc_row][vc_row type=”full_width_background” full_screen_row_position=”middle” column_margin=”default” equal_height=”yes” content_placement=”middle” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” bg_color=”#123043″ scene_position=”center” top_padding=”5%” bottom_padding=”5%” text_color=”light” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” row_position_desktop=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” id=”discover” row_name=”Discover” disable_ken_burns=”yes” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none” gradient_type=”default” shape_type=””][vc_column column_padding=”padding-3-percent” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” font_color=”#ffffff” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/2″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid” column_padding_type=”default” gradient_type=”default”][vc_row_inner column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” text_align=”left” row_position=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” pointer_events=”all”][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” enable_animation=”true” animation=”fade-in-from-bottom” animation_easing=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][vc_column_text css=”” text_direction=”default”]\n [vc_row type=”full_width_background” full_screen_row_position=”middle” column_margin=”default” equal_height=”yes” content_placement=”bottom” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” bg_image=”12802″ bg_image_type=”default” bg_position=”left top” background_image_loading=”default” bg_repeat=”no-repeat” scene_position=”center” top_padding=”10%” constrain_group_1=”yes” bottom_padding=”10%” text_color=”light” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” row_position_desktop=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” enable_gradient=”true” color_overlay=”#000000″ color_overlay_2=”rgba(28,131,182,0.73)”…<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":14842,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-13048","page","type-page","status-publish"],"_links":{"self":[{"href":"https:\/\/limessecurity.com\/en\/wp-json\/wp\/v2\/pages\/13048","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/limessecurity.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/limessecurity.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/limessecurity.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/limessecurity.com\/en\/wp-json\/wp\/v2\/comments?post=13048"}],"version-history":[{"count":0,"href":"https:\/\/limessecurity.com\/en\/wp-json\/wp\/v2\/pages\/13048\/revisions"}],"up":[{"embeddable":true,"href":"https:\/\/limessecurity.com\/en\/wp-json\/wp\/v2\/pages\/14842"}],"wp:attachment":[{"href":"https:\/\/limessecurity.com\/en\/wp-json\/wp\/v2\/media?parent=13048"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}\n
Targeted attack simulations<\/h4>\n
Active Directory know-how<\/h4>\n
Security check of your AD ecosystem<\/h4>\n
Making Active Directory secure –
\nwith the right test package<\/h2>\n[\/nectar_highlighted_text][\/vc_column_inner][\/vc_row_inner][vc_row_inner equal_height=”yes” content_placement=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” top_padding=”15″ text_align=”left” row_position=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” pointer_events=”all”][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/2″ tablet_width_inherit=”small_desktop” animation_type=”default” enable_animation=”true” animation=”fade-in-from-bottom” animation_easing=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid” offset=”vc_col-md-6″][vc_column_text css=”” text_direction=”default”]Our test packages help you to systematically identify and eliminate vulnerabilities in your Active Directory environment. Whether you have a small network or a complex infrastructure – choose the right package for you.[\/vc_column_text][divider line_type=”No Line”][\/vc_column_inner][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/2″ tablet_width_inherit=”small_desktop” animation_type=”default” enable_animation=”true” animation=”fade-in-from-bottom” animation_easing=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid” offset=”vc_col-md-6″][nectar_cta btn_style=”arrow-animation” heading_tag=”span” link_type=”regular” button_color=”accent-color” text_color=”#ffffff” button_border_thickness=”0px” alignment=”right” alignment_tablet=”default” alignment_phone=”left” display=”block” display_tablet=”inherit” display_phone=”inherit” link_text=”Request Information Now” url=”https:\/\/limessecurity.com\/en\/contact\/” margin_top=”30″ padding_top=”20″ padding_bottom=”20″ padding_left=”40″ padding_right=”40″ aria_label_text=”Kontakt aufnehmen”][divider line_type=”No Line”][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row type=”full_width_background” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” bg_color=”#ffffff” scene_position=”center” bottom_padding=”5%” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” row_position_desktop=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none” shape_type=”” gradient_type=”default”][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][tabbed_section style=”vertical_modern” tab_color=”Extra-Color-1″ vs_content_animation=”fade” vs_link_animation=”opacity” vs_navigation_alignment=”left” vs_navigation_width_2=”25%” vs_navigation_func=”default” vs_navigation_width=”regular” vs_navigation_spacing=”15px” vs_navigation_mobile_display=”visible” vs_tab_spacing=”5%”][tab icon_family=”iconsmind” title=”Essential Test” id=”1773737403341-6″ tab_id=”1773737403341-7″][vc_row_inner equal_height=”yes” column_margin=”40px” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” text_align=”left” row_position=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” pointer_events=”all”][vc_column_inner top_padding_desktop=”40″ constrain_group_100=”yes” bottom_padding_desktop=”40″ left_padding_desktop=”40″ constrain_group_101=”yes” right_padding_desktop=”40″ flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”10px” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color=”#efefef” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” font_color=”#000000″ column_shadow=”custom” column_border_radius=”15px” column_link_target=”_self” zindex=”100″ overflow=”hidden” advanced_gradient_angle=”0″ gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid” gradient_type=”default” padding_type=”advanced” column_padding_type=”advanced” column_shadow_custom=”” custom_box_shadow=”horizontal:40,vertical:60,blur:60,spread:-20,opacity:0.175″]
First security assessment of your Active Directory environment – fast, structured and practical.<\/p>\n\n
Advanced analysis with a focus on more complex attack vectors and additional components.<\/p>\n\n
\n
In-depth security assessment – comprehensive, manual and customized.<\/p>\n\n
\n
How to protect your Active Directory in OT environments<\/h2>\n[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][vc_row_inner column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” text_align=”left” row_position=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” pointer_events=”all”][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” enable_animation=”true” animation=”fade-in-from-bottom” animation_easing=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid” delay=”200″]
Results of our AD penetration tests<\/h2>\n[\/nectar_highlighted_text][\/vc_column_inner][\/vc_row_inner][nectar_icon_list animate=”true” color=”Extra-Color-1″ direction=”horizontal” columns=”default” icon_size=”small” icon_style=”border”][nectar_icon_list_item icon_type=”icon” text_full_html=”simple” text_color=”#000000″ title=”List Item” id=”1773737403560-4″ text=”A thorough review of your Active Directory configuration, including user and group configurations, trust relationships, delegation paths and – if available – AD-integrated technologies such as AD CS.” tab_id=”1773737403561-6″ icon_fontawesome=”fa fa-check”][\/nectar_icon_list_item][nectar_icon_list_item icon_type=”icon” text_full_html=”simple” text_color=”#000000″ title=”List Item” id=”1773737403567-4″ text=”Manual modeling of attack paths to uncover both common and complex paths for expanding access and taking over identities.” tab_id=”1773737403567-4″ icon_fontawesome=”fa fa-check”][\/nectar_icon_list_item][nectar_icon_list_item icon_type=”icon” text_full_html=”simple” text_color=”#000000″ title=”List Item” id=”1773737403570-5″ text=”Analysis of risks and attack paths in networked AD, Azure and OT environments.” tab_id=”1773737403570-1″ icon_fontawesome=”fa fa-check”][\/nectar_icon_list_item][nectar_icon_list_item icon_type=”icon” text_full_html=”simple” text_color=”#000000″ title=”List Item” id=”1773737403573-1″ text=”Evaluation of the existing access model, the password policies used and the use of administrative accounts.” tab_id=”1773737403573-6″ icon_fontawesome=”fa fa-check”][\/nectar_icon_list_item][nectar_icon_list_item icon_type=”icon” text_full_html=”simple” text_color=”#000000″ title=”List Item” id=”1773737403580-7″ text=”Generally increased visibility in your domains and their configuration. Possible legacy issues and authorizations\/configurations that are no longer required can thus be detected and evaluated more easily. ” tab_id=”1773737403580-1″ icon_fontawesome=”fa fa-check”][\/nectar_icon_list_item][nectar_icon_list_item icon_type=”icon” text_full_html=”simple” text_color=”#000000″ title=”List Item” id=”1773737403586-0″ text=”A clear, prioritized report with actionable corrective actions tailored to your environment.” tab_id=”1773737403587-0″ icon_fontawesome=”fa fa-check”][\/nectar_icon_list_item][\/nectar_icon_list][\/vc_column][\/vc_row][vc_row type=”full_width_background” full_screen_row_position=”middle” column_margin=”default” equal_height=”yes” content_placement=”middle” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” bg_color=”#ffffff” scene_position=”center” constrain_group_2=”yes” left_padding_tablet=”20%” constrain_group_4=”yes” right_padding_tablet=”20%” left_padding_phone=”24px” constrain_group_6=”yes” right_padding_phone=”24px” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” zindex=”10″ row_position_desktop=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” advanced_gradient_angle=”0″ overlay_strength=”0.8″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none” parallax_bg=”true” parallax_bg_speed=”fast” shape_type=”” gradient_type=”default”][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”right” flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” advanced_gradient_angle=”0″ gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid” gradient_type=”default”][vc_row_inner column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” text_align=”left” row_position=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” pointer_events=”all”][vc_column_inner column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” overflow=”visible” advanced_gradient_angle=”0″ gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid” gradient_type=”default” column_padding_type=”default”][vc_column_text css=”” text_direction=”default”]\n
Frequently asked questions<\/h2>\n[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][toggles style=”minimal_shadow” accordion=”true” accordion_starting_functionality=”default” border_radius=”20px”][toggle color=”Extra-Color-1″ heading_tag=”h3″ heading_tag_functionality=”default” title=”How does a penetration test of my Active Directory work?”][vc_column_text css=”” text_direction=”default”]Basically, a test of your Active Directory (AD) starts like any other pentest at Limes Security. Together with you, the (usually two) testers discuss the objectives and the exact mode of cooperation in a kick-off meeting. All your open questions will be answered and the previously agreed scope and the systems to be tested will be reconfirmed. Any worst-case scenarios that may be of particular interest to you are also discussed. The penetration test itself then takes place, during which it is particularly important for us to remain in close contact with you at all times – for example via a dedicated chat channel. Any questions that arise on both sides can therefore be clarified as quickly as possible, and we will also inform you immediately of any particularly critical vulnerabilities that cannot wait until the official report has been completed. You will receive this report no later than 2 weeks after the end of the penetration test. If desired, a joint final meeting, in which all test results are discussed again, concludes the project.[\/vc_column_text][\/toggle][toggle color=”Extra-Color-1″ heading_tag=”h3″ heading_tag_functionality=”default” title=”Can the AD penetration test also be carried out remotely?”][nectar_responsive_text inherited_font_style=”default” text_direction=”default”]In recent years, we have had very good experience with remote penetration tests in the area of Active Directory. Such an approach has the decisive advantage for you of eliminating any travel costs and time. All you need to do is host virtual machines (VM) – whose images we can provide you with – for our testers to carry out the penetration test. Remote access to these is also required (e.g. VPN). Experience shows that this additional effort is minimal, as both requirements are part of everyday administration in most companies. However, if you would like an on-site test, our testers will of course be happy to come to the test location of your choice.[\/nectar_responsive_text][\/toggle][toggle color=”Extra-Color-1″ heading_tag=”h3″ heading_tag_functionality=”default” title=”What preparations are necessary for the penetration test?”][nectar_responsive_text inherited_font_style=”default” text_direction=”default”]Our testers must be able to access all systems to be tested from their test VMs (whether Limes VMs or those provided by you), unless otherwise agreed in advance. This may require additional firewall activations. In addition, at least two standard users are required in the domain who have the same rights as an average user in your company. If you are testing from VMs provided by you, we also ask that the test users on these are local administrators.[\/nectar_responsive_text][\/toggle][toggle color=”Extra-Color-1″ heading_tag=”h3″ heading_tag_functionality=”default” title=”What should be the focus of the test?”][nectar_responsive_text inherited_font_style=”default” text_direction=”default”]This question can hardly be answered in general terms. Usually, a very individual test focus can be derived from the combination of existing systems\/technologies in your Active Directory, their criticality, your threat profile and the available time budget. We will be happy to assist you with this in advance in a separate scoping meeting. In general, however, we place a special focus on the rights assigned to users and groups, important hardening settings in AD and critical technologies such as AD CS, the AD-integrated PKI solution.[\/nectar_responsive_text][\/toggle][toggle color=”Extra-Color-1″ heading_tag=”h3″ heading_tag_functionality=”default” title=”I have several domains in use. Can\/should they all be tested at the same time? “][nectar_responsive_text inherited_font_style=”default” text_direction=”default”]A basic distinction must be made between domains and forests. Starting from a domain that has been taken over, all other domains in the same forest can usually be taken over without much effort. There are also numerous misconfigurations across forest boundaries that enable compromise. A check of all domains\/forests is therefore definitely recommended from a security perspective. However, as the number of domains\/forests increases, the time budget required also increases, which is why it may be more suitable for you to divide the penetration test into several sub-areas. We will be happy to help you find the package that best suits your individual needs.[\/nectar_responsive_text][\/toggle][toggle color=”Extra-Color-1″ heading_tag=”h3″ heading_tag_functionality=”default” title=”Will the AD penetration test affect my day-to-day operations?”][nectar_responsive_text inherited_font_style=”default” text_direction=”default”]Our testers proceed as carefully as possible to avoid any disruption to day-to-day operations as far as possible. Nevertheless, brief availability problems can occur in rare cases. However, attacks with an increased risk of this are always discussed with you in advance and only carried out after your approval. We are also happy to exclude particularly sensitive systems from the test or parts of it after consultation. Thanks to these precautionary measures, there have never been any major failures during our AD penetration tests.[\/nectar_responsive_text][\/toggle][toggle color=”Extra-Color-1″ heading_tag=”h3″ heading_tag_functionality=”default” title=”My Active Directory has already been tested once. Does a new penetration test still make sense? “][nectar_responsive_text inherited_font_style=”default” text_direction=”default”]The answer to this question is a clear “Yes!”. In our practice, we have seen time and again that the main reason for misconfigurations and vulnerabilities is the great complexity of larger AD environments in particular. Especially when such an environment has been in place for a long time, errors creep in over time, for example temporary authorizations are not deleted, which means that certain users permanently have more rights than they should. A regular retest is therefore highly recommended, especially after conversions and major configuration changes. Existing test results also enable a test focus based on them, whereby measures already implemented to rectify the weaknesses found are checked for their effectiveness and a more in-depth test scope can be defined. For example, aspects such as cross-domain attacks (i.e. attacks across domain boundaries) can be examined in greater depth in such a test.[\/nectar_responsive_text][\/toggle][toggle color=”Extra-Color-1″ heading_tag=”h3″ heading_tag_functionality=”default” title=”All systems in my Active Directory correspond to the latest patch level. Should the environment therefore not be secure? “][nectar_responsive_text inherited_font_style=”default” text_direction=”default”]The patch level of the systems in your AD is a very important component in the overall security concept for an AD. You have therefore already taken a very important step! However, there are numerous legitimate functions in AD whose exploitation opens up many avenues of attack and which cannot be remedied via updates. More complex attack paths in particular, which combine the authorizations of different users, often exist despite the latest patch level. For this very reason, efforts made to date should not be undermined by overlooking such attack possibilities. Our customized penetration tests are the ideal aid for this.[\/nectar_responsive_text][\/toggle][toggle color=”Extra-Color-1″ heading_tag=”h3″ heading_tag_functionality=”default” title=”Is the internal perspective useful for an Active Directory test? After all, my perimeter is heavily hardened and I want to know how attackers can access my networks. “][nectar_responsive_text inherited_font_style=”default” text_direction=”default”]Perimeter protection is undisputedly important. However, practice shows that this is repeatedly breached. Whether it’s a malware infection on an Office client or an Azure identity stolen via phishing – “Assume the Breach” is unfortunately now a reality. To make it as difficult as possible for attackers to achieve their goals, a “defense in depth” approach is a good idea. Similar to a castle with several castle walls, overcoming a single line of defense is not enough. Even if an attacker makes it into your Active Directory, he should not have a free hand there – on the contrary, the hard part should be in front of him. Perimeter protection and a high internal security level: not a contradiction, but two sides of the same coin.[\/nectar_responsive_text][\/toggle][toggle color=”Extra-Color-1″ heading_tag=”h3″ heading_tag_functionality=”default” title=”Which package is right for me?”][nectar_responsive_text inherited_font_style=”default” text_direction=”default”]Choosing the right package depends on the size and complexity of your environment, your objectives and your budget. You can use the following rule of thumb as a guide: For small to medium-sized AD environments (up to approx. 500 users and 100 servers) where a penetration test has never been carried out, an Essential Test is a good choice. For environments that are larger or have already been tested, we recommend at least an Advanced Test. Large environments, especially if several domains and forests are to be considered, benefit from a Comprehensive Test. Especially for SMEs, we offer a dedicated SME package that covers the most important configurations and most serious vulnerabilities. Are you unsure which package suits your environment? Simply write to us using our contact form<\/a>.[\/nectar_responsive_text][\/toggle][\/toggles][\/vc_column][\/vc_row][vc_row type=”in_container” full_screen_row_position=”middle” column_margin=”default” column_direction=”default” column_direction_tablet=”default” column_direction_phone=”default” scene_position=”center” text_color=”dark” text_align=”left” row_border_radius=”none” row_border_radius_applies=”bg” row_position_desktop=”default” row_position_tablet=”inherit” row_position_phone=”inherit” overflow=”visible” overlay_strength=”0.3″ gradient_direction=”left_to_right” shape_divider_position=”bottom” bg_image_animation=”none”][vc_column column_padding=”no-extra-padding” column_padding_tablet=”inherit” column_padding_phone=”inherit” column_padding_position=”all” flex_gap_desktop=”10px” column_element_direction_desktop=”default” column_element_spacing=”default” desktop_text_alignment=”default” tablet_text_alignment=”default” phone_text_alignment=”default” background_color_opacity=”1″ background_hover_color_opacity=”1″ column_backdrop_filter=”none” column_shadow=”none” column_border_radius=”none” column_link_target=”_self” column_position=”default” gradient_direction=”left_to_right” overlay_strength=”0.3″ width=”1\/1″ tablet_width_inherit=”default” animation_type=”default” bg_image_animation=”none” border_type=”simple” column_border_width=”none” column_border_style=”solid”][nectar_global_section id=”9420″][\/vc_column][\/vc_row]\n","protected":false},"excerpt":{"rendered":"