Detecting and Mitigating Active Directory Compromises

This guide informs organizations of recommended strategies to mitigate the 17 most common techniques used by adversaries and malicious actors to compromise Active Directory. It was developed by the Australian Signals Directorate Australian Cyber Security Centre (ASD ACSC) in cooperation with the following international partners: 

This guidance recommends strategies to mitigate techniques used to compromise Active Directory and describes how these techniques can be leveraged by malicious actors. The document is of moderate technical complexity and assumes a basic understanding of cyber security.