Loading...
CREST-aligned · Active Directory & Identity SpecialistsActive Directory security
Active Directory security
assessment Malaysia.
Uncover hidden privilege escalation paths, Kerberoasting, unconstrained delegation, AD Certificate Services (AD CS) template flaws and Entra ID hybrid sync risks with Bank Negara RMiT-ready evidence.
CONSULTANT CERTIFICATIONS & RED TEAM CREDENTIALS
CREST-alignedOSCPOSCEOSEP (Evasion & AD)CRTP (Certified Red Team Professional)CISSPCRTE
BloodHound
Attack path mapping
Tier 0 / PAW
Isolation architecture
Kerberos & AD CS
Deep protocol review
90-day
Free remediation retest
IDENTITY ASSESSMENT SCOPES
Comprehensive Active Directory scope matrix
Identity is the primary attack surface in modern enterprise breaches. We analyze Kerberos, AD CS, BloodHound attack graphs, and Entra ID hybrid sync to eliminate lateral movement.
REGULATORY ALIGNMENT
Active Directory controls built for BNM RMiT & Zero Trust
Our assessments fulfill Bank Negara Malaysia RMiT technology access control mandates (Section 10.3) and NIST Zero Trust Architecture principles.
92%
Estimated compliance overlap
88%
Estimated compliance overlap
85%
Estimated compliance overlap
95%
Estimated compliance overlap
90%
Estimated compliance overlap
84%
Estimated compliance overlap
82%
Estimated compliance overlap
96%
Estimated compliance overlap
80%
Estimated compliance overlap
9 SPECIALISED IDENTITY CAPABILITIES
Complete Active Directory assessment services
From Kerberos ticket forging and AD CS escalation to BloodHound attack graphs and hybrid Entra ID sync.
01
Kerberos & Credential Security
Comprehensive testing for Kerberoasting, AS-REP roasting, DCSync permissions, Golden/Silver Ticket vulnerabilities, and weak encryption types (RC4 vs AES).
Kerberoasting & AS-REP roastingDCSync permission analysisKerberos ticket validation
Scope this service02
BloodHound & Attack Path Mapping
Full mathematical graph analysis of all Active Directory objects, ACLs, and nested groups to identify hidden shortest paths to Domain Admin and Tier 0 control.
Visual attack path mappingChained ACL / ACE abuseNested group sprawl review
Scope this service03
AD CS (Certificate Services) Audit
In-depth inspection of Active Directory Certificate Services for ESC1 through ESC13 template misconfigurations that allow instant domain elevation.
ESC1–ESC13 template auditingMisconfigured SAN validationEnrollment agent abuse
Scope this service04
Entra ID & Hybrid Identity Review
Evaluation of Microsoft Entra Connect (Azure AD Connect) sync servers, seamless SSO, pass-through authentication, and cloud-to-on-premises pivot vectors.
Entra Connect sync hygieneCloud admin to on-prem escalationPass-through auth security
Scope this service05
Delegation & Trust Relationship Testing
Assessment of unconstrained, constrained (S4U2Self/S4U2Proxy), and resource-based constrained delegation (RBCD) across all forest trusts.
Unconstrained delegation risksResource-based constrained (RBCD)Forest & domain trust audit
Scope this service06
Domain Controller & GPO Hardening
Security analysis of Group Policy Objects (GPOs), startup scripts, SYSVOL permissions, Domain Controller operating systems, and LAPS implementation.
GPO tampering & script backdoorsWindows LAPS configurationSYSVOL ACL & share security
Scope this service07
Tier 0 / Administrative Architecture
Gap analysis against the Microsoft Enterprise Access Model (Tier 0 / Tier 1 / Tier 2 separation, PAWs, and credential tiering enforcement).
Tier 0 separation validationPrivileged workstation (PAW) auditAdmin account credential exposure
Scope this service08
Privileged Account Sprawl & PAM
Inventory and risk scoring of Domain Admins, Enterprise Admins, Schema Admins, and service accounts with delegated rights across the domain.
Excessive Domain Admin analysisStale privileged identitiesShadow admin discovery
Scope this service09
AD Detection & Logging Audit
Review of Windows Advanced Audit Policy, event log forwarding, honey token accounts, and SIEM/EDR alert telemetry for active AD attacks.
Audit policy & Event ID validationHoney token account strategyDCSync detection verification
Scope this serviceASSESSMENT METHODOLOGY
Six-phase Active Directory assessment methodology
Structured around MITRE ATT&CK Enterprise techniques for privilege escalation, credential access, lateral movement, and persistence.
01
Forest Discovery & Reconnaissance
Enumerate domain controllers, forest trusts, functional levels, organizational units (OUs), and trust direction without causing disruption.
02
Kerberos & Authentication Analysis
Identify accounts vulnerable to Kerberoasting, AS-REP roasting, unconstrained delegation, and legacy NTLM/RC4 authentication protocols.
03
BloodHound & ACL Graph Mapping
Collect and analyze Active Directory access control entries (ACEs) to uncover hidden transitive rights, ownership issues, and attack paths.
04
AD CS & Infrastructure Hardening
Audit Active Directory Certificate Services templates, GPO modification permissions, SYSVOL scripts, and LAPS deployment coverage.
05
Hybrid Identity & Cloud Trust Review
Inspect Microsoft Entra Connect architecture, password synchronization security, and federation trusts for cross-environment pivot risks.
06
Remediation & Tier 0 Architecture Plan
Deliver prioritized remediation roadmaps, PowerShell fix scripts, Group Policy hardening templates, and a Tier 0 architecture blueprint.
DELIVERABLES
Actionable engineering deliverables & retest
Visual BloodHound attack graphs, ready-to-run PowerShell scripts, GPO hardening templates, and board-level risk summaries.
Executive Active Directory risk summary
Board-level overview of identity architecture risk, key attack paths, and compliance status against Bank Negara RMiT requirements.
BloodHound visual attack path report
Graphical representation of all identified privilege escalation paths to Domain Admin, annotated with exact choke-point fixes.
Technical vulnerability report with CVSS ratings
Step-by-step reproduction instructions and evidence for every Kerberos, AD CS, GPO, and ACL finding.
PowerShell & GPO remediation toolkit
Ready-to-deploy PowerShell scripts and Group Policy templates to remediate vulnerable templates, remove bad ACEs, and enforce LAPS.
Tier 0 isolation and PAW roadmap
Architectural blueprint for implementing the Microsoft Enterprise Access Model, isolating Tier 0 assets from workstation compromises.
Free 90-day verification retest
Full re-evaluation of all identified AD misconfigurations following remediation deployment to confirm permanent risk mitigation.
Why Malaysian enterprises choose nCrypt
CREST-aligned, Red Team certified
Assessments follow CREST-aligned methodologies led by practitioners holding OSCP, OSEP, CRTP, and CRTE offensive security certifications.
BNM RMiT & Identity compliance
Engineered to satisfy Bank Negara Malaysia RMiT Section 10.3/10.4 access control mandates and Cyber Security Act 2024 requirements.
Actionable PowerShell remediation scripts
We provide direct PowerShell commands and GPO hardening templates so systems engineers can immediately patch complex ACLs.
Free 90-day verification retest
After your infrastructure team applies remediation policies, our team re-runs assessments to prove that attack paths are eliminated.
METHODOLOGY STANDARDS & COMPLIANCE MAPPING
SERVICE DIRECTORY
Identity & Active Directory services by domain
Active Directory Security Assessment
Full forest, domain controller and Kerberos review
AD Attack Path Mapping (BloodHound)
Visual graph analysis of shortest routes to Domain Admin
AD CS (Certificate Services) Audit
ESC1–ESC13 template auditing and PKI hardening
Entra ID & Hybrid Identity Assessment
Azure AD Connect, pass-through auth and sync security
Kerberos Protocol & Ticket Testing
Kerberoasting, AS-REP roasting and DCSync validation
Group Policy Object (GPO) Hardening
SYSVOL security, startup scripts and policy backdoors
Tier 0 & PAW Architecture Review
Privileged Access Workstations and domain isolation
Privileged Access Management (PAM) Audit
Eliminating shadow admins and Domain Admin sprawl
AD Security Monitoring & Event Logging
Audit policy, Event ID logging and honey accounts
Bank Negara RMiT AD Compliance
Financial sector identity access and technology risk
Active Directory Red Team Simulation
Simulated adversary lateral movement and domain takeover
