DEFEATING RANSOMWARE WITH TENABLE

Ransomware groups will continue to pursue all possible avenues of attack and will continue to expand their attack techniques and tactics. While ransomware groups may not exploit every vulnerability or misconfiguration, organizations need to keep a close watch for any such weaknesses in their Active Directory environments. AD needs real-time comprehensive security to proactively find, prioritize and remediate threats and misconfigurations as quickly as possible.

Tenable Active Directory Security is a fast, frictionless (agentless), Active Directory security solution that lets you see how AD is involved in the entire attack path Now security teams can pinpoint the highest risks and provide detailed remediation steps to mitigate them A visual representation of the attack paths from any specific point of entry helps users eliminate the privilege escalation techniques that an attacker may use to compromise business critical assets.

By leveraging Tenable ad users can:

• Review domain controllers, servers, workstations, and active directories for new and/or unrecognized accounts

• Audit user accounts with administrative privileges and configure access controls according to the principle of least privilege.

• Prioritize and provide detailed steps for remediation steps and improvement.

• Identify and detect abnormal activity in Active Directory in real-time

• Prevent escalation of privileges and eliminate critical attack paths