IT Security Analysts

Gold Finger helps IT Security Analysts efficiently and reliably assess, analyze and document the security state of all IT resources in their Active Directory.

With Gold Finger IT Security Analysts can instantly –

1. Determine exactly who can enact which identity and access management tasks in their Active Directory, where and how
2. Identify exactly which security permissions entitle which delegated users to enact which administrative tasks in their Active Directory
3. Assess and verify administrative privileges on all user accounts and security groups, including on all executive and IT admin accounts
4. Identify all active and inactive, recently created and deleted, stale, locked, disabled and unmanaged user accounts in Active Directory
5. View and document all failed password attempts in the last 24-hours
6. Locate and document all domain-joined computers that are currently in use or are unused, unmanaged, stale or trusted for delegation
7. View and document the status, state and group membership of any Active Directory based security group, including nested groups
8. Uncover all Active Directory objects on which a specific user or a security group might have sensitive security permissions granted
9. View and analyze all active and inactive Active Directory security trust relationships, including those that have SID-filtering turned on.
10. Analyze the Active Directory Schema for critical security changes
11. Generate printable security audit and regulatory compliance reports that document all above listed aspects of IT security management

Most importantly, Gold Finger helps IT Security Analysts instantly and precisely find out exactly Who Can Do What in Active Directory, and How So.

This information is mission-critical to security because a single unauthorized grant in Active Directory could be the starting point of a sophisticated sequential privilege escalation based attack that could result in a malicious perpetrator obtaining complete administrative privilege in Active Directory and subsequently swiftly compromising the entire IT infrastructure within minutes.

Everyone already has read access to Active Directory, so, with the right tools, any insider could find unauthorized grants in Active Directory. One unauthorized access grant in Active Directory is usually all that a malicious perpetrator needs to launch a sophisticated privilege-escalation based attack.  Just, One.

Only Gold Finger can instantly and accurately assess resultant-access in Active Directory and find real unauthorized access grants in Active Directory.