Active Directory Security Assessment: Protecting Your Identity Infrastructure for Australian Enterprises

Active Directory is the identity backbone of most enterprise Windows environments. AD security assessment covers: password policy and credential hygiene, Kerberos attack vectors (Kerberoasting — requesting service tickets to crack offline; AS-REP roasting — targeting accounts without pre-authentication), ACL misconfigurations that enable privilege escalation, delegation vulnerabilities (unconstrained, constrained, and resource-based constrained delegation abuse), AD Certificate Services attack paths (ESC1-ESC8), group membership analysis (nested groups that grant unintended privileges), trust relationship security (inter-domain and inter-forest trust exploitation), and lateral movement paths (how many steps from a standard user to Domain Admin?). AD compromise typically gives attackers access to everything — making this one of the highest-value assessments.