Active Directory Security Assessment
Focused assessment of on-premise Active Directory and hybrid Entra ID environments to identify privilege escalation paths and Tier 0 exposure.
Core Focus Areas
The 6-Phase Workflow
1. Domain Enumeration
Enumerating domains, forests, OUs, and group policies to capture configuration baselines and identify legacy artefacts.
2. Trust & Hybrid Mapping
Mapping domain trusts and Entra ID Connect configurations to identify transitivity and SID filtering gaps.
3. Privileged Access Analysis
Inventorying Tier 0 assets and auditing Domain Admin and protected group memberships and delegations.
4. BloodHound Attack Paths
Analyzing BloodHound collections to map the shortest paths to Tier 0, identifying ACL abuse and delegation issues.
5. Kerberos & Credential Abuse
Testing for Kerberoasting, ASREPRoasting, weak service account passwords, and AD CS misconfigurations.
6. Tiered Remediation Report
Delivering findings organized by the Microsoft tier model, offering prioritized hardening guides.
What You Receive
Executive Summary
A trust and hybrid configuration review alongside a high-level Tier 0 inventory and exposure assessment.
Technical Findings
An AD security assessment report detailing BloodHound attack path analysis, Kerberos abuse findings, and a tier-aligned remediation roadmap.
Assurance & Verification
A scheduled retest of critical BloodHound attack paths and Kerberos findings once remediation steps are applied.
Get Started
Pricing depends on your scope. After the scoping call, we review what you need and send you a clear quote for this service. NDA available.
Schedule Your Scoping Call