{"id":8192,"date":"2024-07-22T13:27:48","date_gmt":"2024-07-22T11:27:48","guid":{"rendered":"https:\/\/smarttecs.com\/cyber-security\/services\/penetration-tests\/active-directory\/"},"modified":"2025-06-23T08:34:55","modified_gmt":"2025-06-23T06:34:55","slug":"active-directory","status":"publish","type":"page","link":"https:\/\/smarttecs.com\/en\/cyber-security\/services\/penetration-tests\/active-directory\/","title":{"rendered":"Active Directory"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"8192\" class=\"elementor elementor-8192 elementor-3032\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-5d1bd2d e-con-full e-flex e-con e-parent\" data-id=\"5d1bd2d\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t<div class=\"elementor-element elementor-element-21e14b2 e-flex e-con-boxed e-con e-child\" data-id=\"21e14b2\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-ebc2172 elementor-hidden-tablet elementor-hidden-mobile_extra elementor-hidden-mobile elementor-widget elementor-widget-the7-breadcrumb\" data-id=\"ebc2172\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"the7-breadcrumb.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"assistive-text\">You are here:<\/div><ol class=\"breadcrumbs text-small rcrumbs\" itemscope itemtype=\"https:\/\/schema.org\/BreadcrumbList\"><li itemprop=\"itemListElement\" itemscope itemtype=\"https:\/\/schema.org\/ListItem\"><a itemprop=\"item\" href=\"https:\/\/smarttecs.com\/en\/\" title=\"Home\"><span itemprop=\"name\">Home<\/span><\/a><meta itemprop=\"position\" content=\"1\" \/><\/li><li class=\"current\" itemprop=\"itemListElement\" itemscope itemtype=\"https:\/\/schema.org\/ListItem\"><span itemprop=\"name\">Page<\/span><meta itemprop=\"position\" content=\"2\" \/><\/li><\/ol>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-02b9219 elementor-widget elementor-widget-heading\" data-id=\"02b9219\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Active Directory<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b4638eb elementor-widget elementor-widget-heading\" data-id=\"b4638eb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Penetration testing of<br>Active Directory environments<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-c5fafe8 e-con-full e-flex e-con e-child\" data-id=\"c5fafe8\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t<div class=\"elementor-element elementor-element-e718895 e-flex e-con-boxed e-con e-child\" data-id=\"e718895\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-d35e485 elementor-widget elementor-widget-text-editor\" data-id=\"d35e485\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>During a penetration test of an Active Directory environment, the system is examined for security-relevant vulnerabilities from the perspective of an attacker. The focus of the investigation is on identifying deficiencies in the configuration of the overall system, which can lead to a serious escalation of rights or the complete compromise of the Active Directory. <\/p>\n<p>The object of investigation is an on-premise, cloud (Azure AD) or hybrid environment of Microsoft Active Directory.<\/p>\n<p>When examining an Active Directory environment, we follow the procedure model of the <a href=\"https:\/\/www.cert.ssi.gouv.fr\/uploads\/guide-ad.html\" target=\"_blank\" rel=\"noopener\">National Agency for Information Security (CERT-FR)<\/a> from our neighbors in France.<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-d22c3a6 e-con-full e-flex e-con e-child\" data-id=\"d22c3a6\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t<div class=\"elementor-element elementor-element-533bb10 e-flex e-con-boxed e-con e-child\" data-id=\"533bb10\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f4658b8 elementor-widget elementor-widget-heading\" data-id=\"f4658b8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Why Active Directory Penetration Testing?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3ac2a44 elementor-widget elementor-widget-text-editor\" data-id=\"3ac2a44\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Active Directory Domain Services (AD DS) &#8211; abbreviated to Active Directory below &#8211; is a central directory for managing identities and authorizations within an organization and is a particularly sensitive component. Compromising this system can enable attackers to take control of numerous resources (servers, workstations, databases) within a company. <\/p>\n<p>An organization&#8217;s Active Directory is therefore a particular focus of attackers and requires increased attention when hardening the configuration. The more than 20-year history of the product leads to considerable complexity, which can pose a challenge when it comes to security. <\/p>\n<p>The analysts at SmartTECS Cyber Security GmbH therefore bring in the perspective of an attacker in order to identify vulnerabilities in the Active Directory and formulate concrete measures to eliminate them.<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-614fbe4 e-con-full e-flex e-con e-child\" data-id=\"614fbe4\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t<div class=\"elementor-element elementor-element-95515dc e-flex e-con-boxed e-con e-child\" data-id=\"95515dc\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-06dd229 elementor-widget elementor-widget-heading\" data-id=\"06dd229\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Goal<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9f45c77 elementor-widget elementor-widget-text-editor\" data-id=\"9f45c77\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>The aim of penetration testing an Active Directory environment is:<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0dc7d41 content-align-left icon-box-vertical-align-top icon-position-left icon-vertical-align-start elementor-widget elementor-widget-the7_icon_box_grid_widget\" data-id=\"0dc7d41\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"the7_icon_box_grid_widget.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"the7-box-grid-wrapper the7-elementor-widget loading-effect-none the7_icon_box_grid_widget-0dc7d41\">\t\t\t<div class=\"dt-css-grid\">\n\t\t\t\t\t\t\t\t\t<div class=\"wf-cell shown\">\n\t\t\t\t\t\t<div class=\"the7-icon-box-grid\">\t\t\t\t\t\t\t<div class=\"box-content-wrapper\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-icon-div\" aria-label=\"the identification of existing weak points\">\t\t\t\t\t\t\t\t\t\t<div class=\"elementor-icon\">\n\t\t\t\t\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-circle\" viewBox=\"0 0 512 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M256 8C119 8 8 119 8 256s111 248 248 248 248-111 248-248S393 8 256 8z\"><\/path><\/svg>\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<\/a>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"box-content\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<h5 class=\"box-heading\">\n\t\t\t\t\t\t\t\t\t\t\t<a aria-label=\"the identification of existing weak points\">\t\t\t\t\t\t\t\t\t\t\t\tthe identification of existing weak points\t\t\t\t\t\t\t\t\t\t\t<\/a>\t\t\t\t\t\t\t\t\t\t<\/h5>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"box-description\">and misconfigurations of the Active Directory environment<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<div class=\"wf-cell shown\">\n\t\t\t\t\t\t<div class=\"the7-icon-box-grid\">\t\t\t\t\t\t\t<div class=\"box-content-wrapper\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-icon-div\" aria-label=\"the recommendation of appropriate measures\">\t\t\t\t\t\t\t\t\t\t<div class=\"elementor-icon\">\n\t\t\t\t\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-circle\" viewBox=\"0 0 512 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M256 8C119 8 8 119 8 256s111 248 248 248 248-111 248-248S393 8 256 8z\"><\/path><\/svg>\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<\/a>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"box-content\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<h5 class=\"box-heading\">\n\t\t\t\t\t\t\t\t\t\t\t<a aria-label=\"the recommendation of appropriate measures\">\t\t\t\t\t\t\t\t\t\t\t\tthe recommendation of appropriate measures\t\t\t\t\t\t\t\t\t\t\t<\/a>\t\t\t\t\t\t\t\t\t\t<\/h5>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"box-description\">to secure the Active Directory environment<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<div class=\"wf-cell shown\">\n\t\t\t\t\t\t<div class=\"the7-icon-box-grid\">\t\t\t\t\t\t\t<div class=\"box-content-wrapper\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-icon-div\" aria-label=\"a determination of the security level\">\t\t\t\t\t\t\t\t\t\t<div class=\"elementor-icon\">\n\t\t\t\t\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-circle\" viewBox=\"0 0 512 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M256 8C119 8 8 119 8 256s111 248 248 248 248-111 248-248S393 8 256 8z\"><\/path><\/svg>\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<\/a>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"box-content\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<h5 class=\"box-heading\">\n\t\t\t\t\t\t\t\t\t\t\t<a aria-label=\"a determination of the security level\">\t\t\t\t\t\t\t\t\t\t\t\ta determination of the security level\t\t\t\t\t\t\t\t\t\t\t<\/a>\t\t\t\t\t\t\t\t\t\t<\/h5>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"box-description\">of the Active Directory at the time of test execution based on the test results<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<div class=\"wf-cell shown\">\n\t\t\t\t\t\t<div class=\"the7-icon-box-grid\">\t\t\t\t\t\t\t<div class=\"box-content-wrapper\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-icon-div\" aria-label=\"the identification of possible attack paths\">\t\t\t\t\t\t\t\t\t\t<div class=\"elementor-icon\">\n\t\t\t\t\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-circle\" viewBox=\"0 0 512 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M256 8C119 8 8 119 8 256s111 248 248 248 248-111 248-248S393 8 256 8z\"><\/path><\/svg>\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<\/a>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"box-content\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<h5 class=\"box-heading\">\n\t\t\t\t\t\t\t\t\t\t\t<a aria-label=\"the identification of possible attack paths\">\t\t\t\t\t\t\t\t\t\t\t\tthe identification of possible attack paths\t\t\t\t\t\t\t\t\t\t\t<\/a>\t\t\t\t\t\t\t\t\t\t<\/h5>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"box-description\">which can lead to the compromise of highly privileged accounts or connected systems<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a9766cc elementor-widget elementor-widget-text-editor\" data-id=\"a9766cc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>In addition to the scope of the test, the specific test objectives and their prioritization are determined individually in advance in consultation with the client and the investigation is adapted accordingly.<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-c3e9eb7 e-con-full e-flex e-con e-child\" data-id=\"c3e9eb7\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t<div class=\"elementor-element elementor-element-cc3f901 e-flex e-con-boxed e-con e-child\" data-id=\"cc3f901\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-caac106 elementor-widget elementor-widget-heading\" data-id=\"caac106\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">General test methodology<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-10d090a elementor-widget elementor-widget-text-editor\" data-id=\"10d090a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>The test methodology for testing an Active Directory environment by SmartTECS Cyber Security GmbH is based on the specifications of the German Federal Office for Information Security (BSI) for securing Active Directory [1] and on recommendations from the manufacturer Microsoft [2]. In addition, the checklist of the French National Agency for Information Security (CERT-FR) is used [3]. <\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-daa6e83 e-con-full e-flex e-con e-child\" data-id=\"daa6e83\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t<div class=\"elementor-element elementor-element-d75bb3d e-flex e-con-boxed e-con e-child\" data-id=\"d75bb3d\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-9257779 elementor-widget elementor-widget-heading\" data-id=\"9257779\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Next Steps<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b0d0864 elementor-widget elementor-widget-text-editor\" data-id=\"b0d0864\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Once the study has been completed, there are various starting points for effectively continuing the previous analysis.<\/p>\n<h4> <\/h4>\n<h4><span class=\"text-tertiary\">Red Teaming<br \/><\/span><\/h4>\n<p>As part of a Red Team engagement, the focus can be placed on detecting and initiating countermeasures against an attacker in the company network. The focus is on optimizing processes and training the defenders (blue team). <\/p>\n<\/p>\n<h4>Further analyses of the Active Directory<\/h4>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b88aada content-align-left icon-box-vertical-align-top icon-position-left icon-vertical-align-start elementor-widget elementor-widget-the7_icon_box_grid_widget\" data-id=\"b88aada\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"the7_icon_box_grid_widget.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"the7-box-grid-wrapper the7-elementor-widget loading-effect-none the7_icon_box_grid_widget-b88aada\">\t\t\t<div class=\"dt-css-grid\">\n\t\t\t\t\t\t\t\t\t<div class=\"wf-cell shown\">\n\t\t\t\t\t\t<div class=\"the7-icon-box-grid\">\t\t\t\t\t\t\t<div class=\"box-content-wrapper\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-icon-div\" aria-label=\"The previous investigations can be extended to other parts of the Active Directory environment.\">\t\t\t\t\t\t\t\t\t\t<div class=\"elementor-icon\">\n\t\t\t\t\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-circle\" viewBox=\"0 0 512 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M256 8C119 8 8 119 8 256s111 248 248 248 248-111 248-248S393 8 256 8z\"><\/path><\/svg>\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<\/a>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"box-content\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<h5 class=\"box-heading\">\n\t\t\t\t\t\t\t\t\t\t\t<a aria-label=\"The previous investigations can be extended to other parts of the Active Directory environment.\">\t\t\t\t\t\t\t\t\t\t\t\tThe previous investigations can be extended to other parts of the Active Directory environment.\t\t\t\t\t\t\t\t\t\t\t<\/a>\t\t\t\t\t\t\t\t\t\t<\/h5>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"box-description\">Further domains, forests or servers<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<div class=\"wf-cell shown\">\n\t\t\t\t\t\t<div class=\"the7-icon-box-grid\">\t\t\t\t\t\t\t<div class=\"box-content-wrapper\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-icon-div\" aria-label=\"A repeated analysis\">\t\t\t\t\t\t\t\t\t\t<div class=\"elementor-icon\">\n\t\t\t\t\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-circle\" viewBox=\"0 0 512 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M256 8C119 8 8 119 8 256s111 248 248 248 248-111 248-248S393 8 256 8z\"><\/path><\/svg>\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<\/a>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"box-content\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<h5 class=\"box-heading\">\n\t\t\t\t\t\t\t\t\t\t\t<a aria-label=\"A repeated analysis\">\t\t\t\t\t\t\t\t\t\t\t\tA repeated analysis\t\t\t\t\t\t\t\t\t\t\t<\/a>\t\t\t\t\t\t\t\t\t\t<\/h5>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"box-description\">can check the effectiveness of the identified weaknesses once they have been eliminated.<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<div class=\"wf-cell shown\">\n\t\t\t\t\t\t<div class=\"the7-icon-box-grid\">\t\t\t\t\t\t\t<div class=\"box-content-wrapper\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-icon-div\" aria-label=\"Evolving Active Directory environments\">\t\t\t\t\t\t\t\t\t\t<div class=\"elementor-icon\">\n\t\t\t\t\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-circle\" viewBox=\"0 0 512 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M256 8C119 8 8 119 8 256s111 248 248 248 248-111 248-248S393 8 256 8z\"><\/path><\/svg>\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<\/a>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"box-content\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<h5 class=\"box-heading\">\n\t\t\t\t\t\t\t\t\t\t\t<a aria-label=\"Evolving Active Directory environments\">\t\t\t\t\t\t\t\t\t\t\t\tEvolving Active Directory environments\t\t\t\t\t\t\t\t\t\t\t<\/a>\t\t\t\t\t\t\t\t\t\t<\/h5>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"box-description\">can be regularly checked for existing vulnerabilities. This can be done, for example, after the domain functional level of the Active Directory Domain Services has been raised. <\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e90a13e elementor-widget elementor-widget-text-editor\" data-id=\"e90a13e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h4><span class=\"text-tertiary\">Security consulting<\/span><\/h4>\n<p>On the basis of the knowledge gained, targeted measures can be taken to raise the security level of the Active Directory environment that go beyond the mere elimination of vulnerabilities. This includes, for example, the implementation of the <em>Enterprise Access Model<\/em> [4] in accordance with Microsoft&#8217;s recommendations or the targeted placement of traps (decoy users\/objects) for attackers within the Active Directory. <\/p><\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-53bc6bc e-con-full e-flex e-con e-child\" data-id=\"53bc6bc\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t<div class=\"elementor-element elementor-element-24d0649 e-flex e-con-boxed e-con e-child\" data-id=\"24d0649\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-72b04c9 elementor-widget elementor-widget-heading\" data-id=\"72b04c9\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Sources<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f2cb9a5 elementor-widget elementor-widget-text-editor\" data-id=\"f2cb9a5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>[1] Federal Office for Information Security(BSI): Building block for securing Active Directory, <a href=\"https:\/\/www.bsi.bund.de\/SharedDocs\/Downloads\/DE\/BSI\/Grundschutz\/IT-GS-Kompendium_Einzel_PDFs_2023\/06_APP_Anwendungen\/APP_2_2_Active_Directory_Domain_Services_Edition_2023.html\" target=\"_blank\" rel=\"noopener\">https:\/\/www.bsi.bund.de\/SharedDocs\/Downloads\/DE\/BSI\/Grundschutz\/IT-GS-Kompendium_Einzel_PDFs_2023\/06_APP_Anwendungen\/APP_2_2_Active_Directory_Domain_Services_Edition_2023.html<\/a><\/p>\n<p>[2] Microsoft: Best Practices for Securing Active Directory, <a href=\"https:\/\/learn.microsoft.com\/en-us\/windows-server\/identity\/ad-ds\/plan\/security-best-practices\/best-practices-for-securing-active-directory\" target=\"_blank\" rel=\"noopener noreferrer\">https:\/\/learn.microsoft.com\/en-us\/windows-server\/identity\/ad-ds\/plan\/security-best-practices\/best-practices-for-securing-active-directory<\/a> <\/p>\n<p>[3] National Agency for Information Security (CERT-FR), France: Active Directory Security Assessment Checklist, <a href=\"https:\/\/www.cert.ssi.gouv.fr\/uploads\/guide-ad.html\" target=\"_blank\" rel=\"noopener noreferrer\">https:\/\/www.cert.ssi.gouv.fr\/uploads\/guide-ad.html<\/a> <\/p>\n<p>[4] Microsoft: Enterprise Access Model, <a href=\"https:\/\/learn.microsoft.com\/en-us\/security\/compass\/privileged-access-access-model\" target=\"_blank\" rel=\"noopener noreferrer\">https:\/\/learn.microsoft.com\/en-us\/security\/compass\/privileged-access-access-model<\/a> <\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Sie befinden sich hier: Start Active Directory Penetration testing of Active Directory environments During a penetration test of an Active Directory environment, the system is examined for security-relevant vulnerabilities from the perspective of an attacker. The focus of the investigation is on identifying deficiencies in the configuration of the overall system, which can lead to&hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":8189,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"template-microsite.php","meta":{"inline_featured_image":false,"footnotes":""},"class_list":["post-8192","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/smarttecs.com\/en\/wp-json\/wp\/v2\/pages\/8192","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/smarttecs.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/smarttecs.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/smarttecs.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/smarttecs.com\/en\/wp-json\/wp\/v2\/comments?post=8192"}],"version-history":[{"count":2,"href":"https:\/\/smarttecs.com\/en\/wp-json\/wp\/v2\/pages\/8192\/revisions"}],"predecessor-version":[{"id":8194,"href":"https:\/\/smarttecs.com\/en\/wp-json\/wp\/v2\/pages\/8192\/revisions\/8194"}],"up":[{"embeddable":true,"href":"https:\/\/smarttecs.com\/en\/wp-json\/wp\/v2\/pages\/8189"}],"wp:attachment":[{"href":"https:\/\/smarttecs.com\/en\/wp-json\/wp\/v2\/media?parent=8192"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}