IT Risk Assessors

Gold Finger helps IT Risk Assessors assess and document the security risks to vital IT resources stored in Active Directory, such as accounts and groups.

With Gold Finger IT Risk Assessors can instantly –

1. Identify and document all administrative privilege delegation policy violations for all vital identity and access management tasks
2. Identify the precise security permissions which are causing the identified administrative privilege delegation policy violations
3. Uncover administrative privilege delegation based security risks on any user account and security group, including executive accounts
4. Identify all unmanaged, inactive, recently created, stale, or disabled user accounts in Active Directory that may pose a risk to security
5. View and document all failed password attempts in the last 24-hours
6. Enumerate and document all domain-joined computers that are unused, unmanaged, stale or insecurely trusted for delegation
7. View and document the status, state and group membership of any Active Directory based security group, including nested groups
8. Identify all Active Directory objects on which a suspect individual or a security group might have certain security permissions granted
9. Assess and document all potentially insecure Active Directory security trust relationships based on their direction or transitivity.
10. Uncover any potentially insecure Active Directory Schema settings
11. Generate printable security audit and risk assessment reports that document all above listed aspects of IT security management

Most importantly, Gold Finger helps IT Risk Assessors assess and mitigate privilege-escalation risks because it lets them instantly and accurately determine exactly Who Can Do What in Active Directory, and How So.

The assessment of these risks is mission-critical to security because a single unauthorized grant in Active Directory could be the starting point of a sophisticated sequential privilege escalation based attack that could result in a malicious perpetrator obtaining complete administrative privilege in Active Directory and subsequently swiftly compromising the entire IT infrastructure.

Everyone already has read access to Active Directory, so, with the right tools, any insider could find unauthorized grants in Active Directory. One unauthorized access grant in Active Directory is usually all that a malicious perpetrator needs to launch a sophisticated privilege-escalation based attack.  Just, One.

Only Gold Finger can instantly and accurately assess resultant-access in Active Directory and find real unauthorized access grants in Active Directory.