Active Directory security is the set of controls that protect the Microsoft directory where an organization manages users, computers, passwords and permissions. It includes limiting accounts with domain admin privileges, auditing changes and weak configurations, and monitoring for attacks such as Kerberoasting; an attacker who takes over the directory can reach nearly the entire network.
How TecnetOne handles it: Penetration Testing
AD security, Active Directory hardening, domain controller security, Active Directory audit, Kerberoasting
Related terms
IGA (Identity Governance and Administration)
Identity governance and administration (IGA) is the cybersecurity discipline that controls who has access to which systems, why and for how long. It automates user onboarding, role changes and offboarding, enforces least privilege and runs periodic access reviews, such as those required in ISO/IEC 27001 or SOX (Sarbanes-Oxley Act) audits.
ITDR (identity threat detection and response)
Identity threat detection and response (ITDR) is the set of tools and practices that monitor identity systems, such as Active Directory or Microsoft Entra ID, to detect and stop account abuse. It looks for signals like impossible travel sign-ins, privilege escalation or Kerberoasting attacks, and lets the security team disable the account or revoke its active sessions.
One-Time Password (OTP)
A one-time password (OTP) is a temporary code that is valid for a single sign-in or transaction and expires within seconds or minutes. It is generated by an authenticator app or a hardware token, or sent by SMS or email, and usually serves as the second factor in multi-factor authentication (MFA). Codes sent by SMS are exposed to SIM swapping attacks.
Biometric authentication
Biometric authentication is a method of verifying a person's identity based on a unique physical or behavioral trait, such as a fingerprint, face, iris or voice. In a business setting, it is used to unlock devices or approve access as a second factor. Unlike a password, a biometric trait cannot be changed if compromised, so it works best combined with other factors.
Strong password
A strong password is long, unique to each service and hard to guess, ideally a passphrase of several words with at least 14 characters. Length matters more than mixing symbols, and it works best alongside a password manager and multi-factor authentication, because even a strong password is useless once it is reused or leaked.
Ready to put this into practice in your operation?
Tell us what you need and a TecnetOne engineer will get back to you.
Talk to an engineerTalk to an engineer
Tell us what you need and we’ll reply the same business day.