A common question we are asked by clients after deploying is, “Are attack paths in Active Directory this bad for everyone?” The answer is usually “Yes,” which doesn’t make them feel better. However, what does often cheer them up is learning that many of those attack paths can be fixed quickly and easily, now that the security team knows they exist. Attack path types From the perspective of a defender, there are three types of … Continue reading 3 types of attack paths in Microsoft Active Directory environments