Pwned by the Mail Carrier

How MS Exchange on-premises compromises Active Directory and what organizations can do to prevent that.

At SpecterOps, we recommend our customers establish a security boundary around their most critical assets (i.e., Tier Zero) of Active Directory (AD). We help them find and remediate the attack paths that cross this security boundary with BloodHound Enterprise. One of the most common challenges we and our customers face is Microsoft Exchange on-premises (Exchange).

If you compromise Exchange in AD, you are …

active directory assets attack attack paths bloodhound can carrier critical critical assets customers directory enterprise exchange find mail microsoft exchange ms exchange organizations pwned research security security-boundaries specterops