Summary
Microsoft Active Directory is a core identity and access management system that controls access to critical systems and data, making it a prime target for malicious cyber threats. It acts as an organisation's digital gatekeeper, verifying users, managing permissions, and enabling single sign-on. Because Active Directory controls access to so many systems, it is a highly attractive target for malicious actors. If malicious actors take control of your Active Directory, they can effectively gain complete control over an organisation’s enterprise IT network. In many cases, they can use the permissions already granted to standard users to investigate the environment, discover weaknesses, and gradually increase their access. Alongside our international partners, we have released updated guidance on Detecting and mitigating Active Directory compromises , to help organisations improve their network defences against these threats.