热门搜索：

Active Directory Guardian

2023-11-29-SpyCloud我***

AI智能总结

Active Directory Guardian is a solution that helps protect your enterprise from criminals who gain access to your users' Active Directory credentials through third-party breaches or malware infections. It uses the largest repository of recaptured credential data in the world to prevent employees from choosing weak or exposed passwords. The solution also automatically detects and resets exposed passwords and disables high-risk employee accounts, keeping your corporate assets secure. Active Directory Guardian provides an at-a-glance view of your Active Directory status, allowing you to easily identify reuse of compromised credentials and scan for "fuzzy" variations and off-limits passwords.

AUTOMATECOMPROMISEDPASSWORDREMEDIATION Acriminalwhogainsaccesstoyourusers’ActiveDirectory(AD)credentialsthroughathird-partybreachormalwareinfectioncaneasilylogintoyournetwork–accessingbusinesscriticalservices.Toprotectyourenterprise,youneedtotakeactionquickly. PRODUCTOVERVIEW SpyCloudchecksyourusers'ActiveDirectorycredentialsagainstbillionsofrecaptured darknetassetstoseeifanyofyourcorporateloginsareavailabletocybercriminals.WithSpyCloudActiveDirectoryGuardian,youcanpreventemployeesfromchoosingweakorexposedActiveDirectorypasswordsusingthelargestrepositoryofrecapturedcredentialdataintheworld.Asnewincidentsoccur,youcanautomaticallydetectandresetexposedpasswordsanddisablehigh-riskemployeeaccounts–keepingyourcorporateassetssecure.ActiveDirectoryGuardianmakesiteasytoidentifyreuseofcompromisedcredentials,scanfor"fuzzy"variationsandoff-limitspasswords,andcheckforpriorexposure. Dashboard Schedules GeneralLog UserActionsLog Settings AdvancedSettings BannedPasswords EmailTemplates Okta Remediation ©SpyCloudInc.AllRightsReserved. ActiveDirectoryGuardian:At-a-glanceviewofyourActiveDirectorystatus.Runamanualscanofallcredentials,schedulescans,andviewresultsofpreviousscansforusernamematches,exposedcredentials,andexposedADaccounts. ! BENEFITSATAGLANCE STAYAHEADOFCRIMINALS withproactivemonitoringofyourActiveDirectoryforexposedemployee credentials REDUCEYOURTEAM’SWORKLOAD withautomateddetectionandremediationofexposedpasswords LOCKOUTBADACTORS bymakingsureyourassetsareprotectedbystrongpasswordsfromdayone REDUCEEFFORT identifying,investigating,andremediatingpotentialaccounttakeoversbyautomaticallyenforcingcorporate passwordpolicies DATASHEET ACTIVEDIRECTORYGUARDIAN SPYCLOUDACTIVEDIRECTORYGUARDIAN HOWITWORKS SpyCloudActiveDirectoryGuardianincludestwocomponentsthatcanbeimplementedtogetherorseparately:abrowser-basedapplicationthatinstallsasaserviceandrunslocally,andapasswordﬁlterthatrunsonyourdomaincontrollers.Whenyouruserscreatepasswords,youcanpreventthemfromusingdictionarywords,sequentialcharacters,orpreviously-breachedpasswords.Tomitigatenewexposures,proactivelymonitoryourADusingavarietyofscanoptionstoincludeexactcredentialmatches,“fuzzy”variations,password-onlymatches,bannedpasswords,andsharedpasswords. DecidewhentoautomateremediationbasedonascancriteriaandproactivelyinformyourADusersutilizingourSMTPfunctionality.Minimizeemployeedisruptionbyautomatingworkflowsandimprovingemployeepasswordhygiene. ! Whenscanningforpreviouslycompromised passwordsacrosstheentireSpyClouddatasetto alignwithNISTpasswordguidance,ActiveDirectoryGuardianusesk-anonymitytocheckpasswords, wherethefirstfivecharactersofeachpasswordhasharesentoverthenetwork—nevertheuser’sactualplaintextpassword.ThismethodchecksiftherehaseverbeenamatchintheSpyCloud database,whilenotlettingattackershaveaccesstoactualpasswords. NOTE:TheuserandADhashdataisheldinephemeralmemorystorage,notcachedorstoredondisk. 1 ActiveDirectoryGuardian usesnativeMicrosoftcallstopulldatarelatedtousersinyourADenvironmentincludingNTLMhashesofyourADpasswords. > 2 ActiveDirectoryGuardianpulls exposedcredentialsmatchingyourSpyCloudwatchlistemaildomainviatheSpyCloudAPIandrunsanalyticslocally. > 3 WhenaligningwithNISTpassword > guidance,ActiveDirectoryGuardiancheckseachofyourADusers'passwords,including"fuzzy"variations,toensurethesepasswordshavenotbeenseeninabreachormalwarelogsthatexistanywhereinSpyCloud’sdatabase. 4 Iftheuser’scredentialsmatch, youcanautomateremediationforpasswordresetthroughAD,includingenvironmentswhere OktaisusedforSSO. > 5 ADremediationincludesthe optiontodisabletheuser,blockingaccounttakeoverattemptsusingthecompromisedcredentials.Oryoucanconﬁgurenotiﬁcationstoinformtheuserwhenaforcedpasswordresetisrequired. SPYCLOUDACTIVEDIRECTORYGUARDIAN AUTOMATICALLYRESETCOMPROMISEDPASSWORDS EASYOKTAINTEGRATION Thisisanexampleofacustomer’senvironmentusingOktawithauthenticationprovidedbyAD.ActiveDirectoryGuardianisconﬁguredtodirectlyconnecttoOktausingtheOktaAPI. FIREWALL ADG ACTIVE DIRECTORY LOCALUSERS PASSWORDRESETVIAOKTAAPI AUTHENTICATEPROVISION DE-PROVISION ENTERPRISECLOUD APPS REMOTEUSERS PRODUCTCAPABILITIES ! USERNOTIFICATIONS Informuserswhenaforcedpasswordresetisrequiredandcreateworkflowstomitigateexposures CUSTOMREMEDIATIONPOLICIES Optionsincludenotifyinguserswithcustomemailssentfromaknowninternaladdress,andmultipleremediationoptionsincludingdisablingusersorapplyingtousersbasedonroletype *** BANNEDPASSWORDS Blockspeciﬁcpasswords,suchascompanyname,industryterms,teamnames,andkeywordsrelatedtocurrentevents SCHEDULEDSCANNING Scanatyourpreferredcadencewithreportsdelivereddirectlytoyourinboxtocatchexposuresorthereuseofcompromisedpasswords REPORTONSHAREDPASSWORDS Gainvisibilityofinternalpasswordreuseviaregularlycadencedscans NISTCOMPLIANCE AligntoNISTpasswordguidelinesbypreventingemployeesfromsettingweakorcompromisedpasswordsandautomaticallyﬁlteringoutbadpasswords SPYCLOUDACTIVEDIRECTORYGUARDIAN PASSWORDFILTER Secureyouremployees’passwordsfromthemomentthey’recreated,a

点击免费查看完整报告

你可能感兴趣

Active Directory Guardian

你可能感兴趣

使用 SpyCloud Active Directory Guardian 简化 NIST 密码指南

使用 SpyCloud Active Directory Guardian 简化 NIST 密码指南

Active Directory 的分层方法

Directory of Committee of Permanent Representatives to UN Environment

A Directory of Information - Authorization of Collective Investment Schemes (CIS) and Related Services