Cyber Security
Paramount Defenses
Company | Vision | Leadership | Products | Services | Support | News | Careers | Contact
Cyber Threats RSA Conference Top-10 Innovators

2007
Cyber Security Active Directory Audit Fast Company Magazine Fast-50
2008
Active Directory Permissions Report Active Directory Audit Tool Valued Microsoft Partner

2009
Built in USA Learn more about this Serious Active Directory Security Risk
Home
Overview
Capabilities
Uniqueness
Audience
Features
Benefits
Solutions
Editions
FAQ +
Demos
Trials
Sales

Powered by Patented Technology


"We use the Gold Finger to fulfill our Active Directory (AD) Audit needs.

It saves us a lot of time and effort and we would recommend it to anyone who needs to perform AD audits trustworthily and cost-effectively.

We even had a call from internal security wanting to know how they could get hold of the data that it produced.

Great product, great support."

– Sean Seeliger

IT Architect

Download Free Trial
Download Trial


Gold Finger delivers 6 valuable benefits that substantially mitigate risk and enhance organizational security.

Mitigate
Risk
Delegate
Securely
Audit
Access
Audit
Security
Generate
Reports
Demonstrate
Compliance


Reliably Mitigate Risk of Security Privilege Escalation in Active Directory

Gold Finger empowers organizations to mitigate arguably the most serious IT / cyber security risk to their Microsoft Windows Server based IT infrastructure, that of security privilege escalation in their Active Directory.

Active Directory Security Privilege Escalation

The risk allows malicious perpetrators to use any domain user account in the organization's Active Directory to instantly identify privilege escalation paths created by the presence of unauthorized administrative access grants in Active Directory, and exploit them to instantly gain administrative access in Active Directory.


The Risk

The risk posed by the presence of unauthorized administrative access grants in Active Directory is one of the most serious security risks to which Microsoft Windows Server based IT infrastructures are currently exposed.

How unauthorized security privilege escalation paths in Active Directory can be identified and exploited to compromise security

This risk is very serious because it provides thousands of privilege escalation paths that malicious perpetrators could potentially identify and exploit to obtain complete administrative control over the entire IT infrastructure.


The Cause

It exists because organizations lack the means to accurately assess resultant-access in their Active Directory.

While they frequently delegate administrative responsibilities for IT management in Active Directory, they lack the means to reliably assess or verify the adherence of these delegations to the principle of least privilege. Consequently, in most organizations, many more individuals, than those actually authorized, almost always end up possessing excessive (unauthorized) administrative power ("Keys to the Kingdom", or parts thereof.)


The Consequences

A single such unauthorized grant is usually sufficient to inflict substantial damage, and these unauthorized grants can technically be identified by anyone. That is because everyone with a domain user account already has sufficient access to security data in Active Directory to identify these unauthorized grants. They only lack the means to interpret the data to find and exploit these dangerous unauthorized administrative access grants.

This risk, left unmitigated, poses a clear and present danger to organizational security, because it jeopardizes the very foundation of enterprise-wide IT security in these organizations, i.e. their underlying Active Directory.


Mitigation

Gold Finger completely automates the instant and accurate identification of all administrative grants in Active Directory, both authorized and unauthorized, as well as their source, thus empowering organizations to identify and eliminate any unauthorized grants before they can be identified and exploited by malicious perpetrators.

Gold Finger thus helps organizations assess and mitigate a mission-critical, enterprise-wide, IT security risk.

An Active Directory Audit Tool is essential for Active Directory Audit, for Active Directory Security and for Cyber Security

Benefits Benefits
Delegate Securely Delegate Securely

Contact Us
Who We Are What We Do How We Protect You
Home

Terms of Use Copyright Paramount Defenses Inc  2006 – 2013. All Rights Reserved Privacy Policy