Free Active Directory Security and health Assessment tool launched as SmartProfiler Active Directory
Added: (Sat May 06 2023)
Pressbox (Press Release) -
A free Active Directory Security Assessment tool based on MITRE and ANSSI framework was released to improve security posture of Active Directory forests.
Active Directory is a primary source for Authentication and Authorization for users and business applications. Microsoft doesn't provide out of the box tools that can be used to perform both health & security assessment of Active Directory environment. SmartProfiler for Active Directory Tool can be used to perform assessment of multiple Active Directory forests and provide an Assessment Report which includes issues and recommendations to fix the issues.
The SmartProfiler for Active Directory software is based on the MITRE and ANSSI Frameworks and is aimed at improving the health and security posture of multiple Active Directory forests by providing insights into Active Directory environment. SmartProfiler tool is tailored to address security threats identified by the MITRE and ANSSI organizations, and it goes beyond the standard tests provided by these frameworks. In fact, SmartProfiler offers a more comprehensive set of 140 tests across various domains such as Account Policies, AD DNS, AD Forest, Domain Configuration, Domain Controllers Configuration, Forest Configuration, Group Policy, Security & Risks, and Time Synchronization of Domain Controllers. This is in contrast to the MITRE and ANSSI frameworks which offer only 54 tests. Notably, DynamicPacks Technologies Active Directory team has specifically designed the additional 86 tests offered by SmartProfiler for Active Directory to ensure that every aspect of Active Directory Forest is covered.
SmartProfiler Active Directory Assessment Categories:
• Active Directory Reporting: Tests in this category are executed to get data for reporting purposes.
• Account Policies: Tests in this category are executed to get data for Account and Lockout Policies.
• AD DNS: Tests in this category are executed to get DNS Configuration and issues identified on the AD DNS Servers.
• AD Forest: Tests executed in this category are executed to find issues in AD Forest.
• Configuration-Domain: Tests in this category are executed to check if configuration for overall domain is as per Microsoft best practices.
• Configuration-Domain Controller: Tests in this category are executed to check configuration on domain controllers such as DNS Loopback, Multihomed Tests, NIC Dynamic Updates tests, Domain Controllers OU tests and so on.
• Configuration-Forest: Tests in this category are executed to check if AD Sites and Site Links are configured as per Microsoft best practices. There are 12 tests executed in Configuration-Forest category.
• Domain Controller: Tests such as Undefined Subnets, local disks, DNS configuration, Event Log settings, DCDiag, Roles and features, and other tests are executed. There are more than 22 tests executed for each domain controller.
• Security and Risk: Security and Risk category contains more than 50 tests and most of the tests are compliant with ANSSI and MITRE.
Some of the notable features of SmartProfiler for Active Directory are:
• Reduce Active Directory attack surface by 65%
• Identify potential security issues in AD environment.
• Reduce Active Directory troubleshooting time.
• Report on Missing Microsoft Recommended Settings
The Active Directory Health & Security assessment by SmartProfiler is performed in simple five steps. In step one you will be registering an Active Directory Forest under SmartProfiler, second step is to perform an Active Directory discovery and ensure the domain controllers connectivity is checked. Third step is to define the assessment scope to ensure only selected domains are touched by the SmartProfiler. Final step is to execute the Active Directory assessment and then see the issues identified in the SmartProfiler dashboard console.
DynamicPacks Technologies has collaborated with clients globally to develop tests that target both common and hidden issues within Active Directory environments. With SmartProfiler for Active Directory, our clients can be confident that they are receiving the most comprehensive suite of tests available for Active Directory.
SmartProfiler for Active Directory is a multi-forest tool that enables customers to add an unlimited number of Active Directory forests, perform a security and compliance scan, and generate a report. The dashboard provides an overall summary that helps clients understand the overall security posture of their Active Directory environment. The report generated by SmartProfiler includes information on the impact of any issues found as well as recommended actions to address them. The cost of the product is $3999 per Active Directory forest.
SmartProfiler for Active Directory can be found here: https://microsoft-assessment.com/smartprofiler-active-directory-assessment/
SmartProfiler for Active Directory datasheet can be downloaded by clicking this link:
https://microsoft-assessment.com/wp-content/uploads/2023/04/SmartProfiler-ActiveDirectory_DATASHEET.pdf
Here's the list of test cases that are executed as part of SmartProfiler Active Directory assessment: https://microsoft-assessment.com/smartprofiler-active-directory-assessment-test-cases/
Sample Report generated by SmartProfiler for Active Directory can be found here: https://microsoft-assessment.com/smartprofiler-sample-report-for-active-directory/