Domain Risk Level: 100 / 100
It is the maximum score of the 4 indicators and one score cannot be higher than 100. The lower the better
Stale Object : 0 /100
It is about operations related to user or computer objects
1 rules matched
Trusts : 0 /100
It is about links between two Active Directories
4 rules matched
Privileged Accounts : 25 /100
It is about administrators of the Active Directory
1 rules matched
Anomalies : 100 /100
It is about specific security control points
12 rules matched
Stale Objects : 0 /100
It is about operations related to user or computer objects
House keeping
Privileged Accounts : 25 /100
It is about administrators of the Active Directory
Best practices
Trusts : 0 /100
It is about operations related to user or computer objects
Trust permeability
Best practices
No operative link with other domains has been found.
Anomalies : 100 /100
It is about specific security control points
Access to critical priority objects
Access to high priority objects
Access to medium priority objects
Priority to remediate ? | Critical Object Found ? | Number of objects with Indirect ? | Max number of indirect numbers ? | Max ratio ? |
---|---|---|---|---|
Critical | YES | 6 | 5 | 100 |
High | NO | 1 | 1 | 100 |
Medium | YES | 3 | 1 | 100 |
Other | YES | 2 | 1 | 0 |
Group or user account ? | Priority ? | Number of users member of the group ? | Number of computer member of the group ? | Number of object having indirect control ? | Number of unresolved members (removed?) ? | Link with other domains | Rules triggered | Detail |
---|---|---|---|---|---|---|---|---|
Account Operator | High | 1 (Details) | 0 | 1 (Details) | 0 | None | 0 rule triggered | Analysis |
Administrator | Critical | 1 (Details) | 0 | 1 (Details) | 0 | None | 0 rule triggered | Analysis |
Administrators | Critical | 5 (Details) | 0 | 2 (Details) | 0 | None | 0 rule triggered | Analysis |
Backup Operators | High | 0 | 0 | 0 | 0 | None | 0 rule triggered | Analysis |
Certificate Operators | Medium | 0 | 0 | 0 | 0 | None | 0 rule triggered | Analysis |
Certificate Publishers | Other | 0 | 1 (Details) | 1 (Details) | 0 | None | 0 rule triggered | Analysis |
Domain Administrators | Critical | 5 (Details) | 0 | 5 (Details) | 0 | None | 0 rule triggered | Analysis |
Enterprise Administrators | Critical | 1 (Details) | 0 | 1 (Details) | 0 | None | 0 rule triggered | Analysis |
Incoming Forest Trust Builders | Medium | 0 | 0 | 0 | 0 | None | 0 rule triggered | Analysis |
Network Operators | Medium | 0 | 0 | 0 | 0 | None | 0 rule triggered | Analysis |
Print Operators | Medium | 0 | 0 | 0 | 0 | None | 0 rule triggered | Analysis |
Schema Administrators | Critical | 2 (Details) | 0 | 2 (Details) | 0 | None | 0 rule triggered | Analysis |
Server Operators | High | 0 | 0 | 0 | 0 | None | 0 rule triggered | Analysis |
Group or user account ? | Priority ? | Number of users member of the group ? | Number of computer member of the group ? | Number of object having indirect control ? | Number of unresolved members (removed?) ? | Link with other domains | Rules triggered | Detail |
---|---|---|---|---|---|---|---|---|
Builtin OU | Medium | 0 | 0 | 0 | 0 | None | 0 rule triggered | Analysis |
Domain Controllers | Critical | 0 | 2 (Details) | 2 (Details) | 0 | None | 0 rule triggered | Analysis |
Domain Root | Medium | 0 | 0 | 0 | 0 | None | 0 rule triggered | Analysis |
Enterprise Read Only Domain Controllers | Other | 0 | 0 | 1 (Details) | 0 | None | 0 rule triggered | Analysis |
Group Policy Creator Owners | Medium | 1 (Details) | 0 | 1 (Details) | 0 | None | 0 rule triggered | Analysis |
Krbtgt account | Medium | 1 (Details) | 0 | 1 (Details) | 0 | None | 0 rule triggered | Analysis |
Read Only Domain Controllers | Medium | 0 | 0 | 1 (Details) | 0 | None | 0 rule triggered | Analysis |
Group or user account ? | Priority ? | Number of users member of the group ? | Number of computer member of the group ? | Number of object having indirect control ? | Number of unresolved members (removed?) ? | Link with other domains | Rules triggered | Detail |
---|