Protect Privileged Credentials to Stop Lateral Movement
According to research by FireEye on the SolarWinds breach, "Once the attacker gained access to the network with compromised credentials, they moved laterally using multiple different credentials." This is a good reminder that privileged credentials are highly targeted by threat actors and need to be protected.
If your applications have the same privileged account on multiple systems, the credentials are most likely shared and could be leveraged for lateral movement. Any applications or service accounts present in your Domain Administrators Group are also a potential risk. These passwords should be vaulted, monitored for access, regularly changed, and protected against any unauthorized use.
The first step is discovering all privileged accounts on your network.
The BeyondTrust Discovery Tool generates a report that provides key information on your privileged accounts, including administrative accounts with their password ages, local accounts with administrative access, and services running with privileged accounts.
Detailed, Actionable Reports
See all the privileged credentials being used to access endpoints and systems on your network
Service Accounts Included
Discover those hard-to-manage service account credentials, in addition to AD and Local accounts
Free, Unlimited Use
Security is never finished, so run the discovery tool periodically or whenever your network changes
