Introducing Active Directory Security Posture Management in Cortex XSIAM
Active Directory remains a primary target for identity-based attacks. A single risky configuration—whether a misconfigured certificate template, excessive permission or stale account—can create an opportunity for attackers to escalate privileges and move laterally.
