Active Directory Control Paths
A tool for auditing and visualizing control paths in Active Directory to identify privilege escalation and resource access risks.
What is Active Directory Control Paths?
Active Directory Control Paths is a security auditing tool that maps and visualizes control relationships within Active Directory environments. It analyzes LDAP, SYSVOL, and Exchange permissions to identify potential privilege escalation paths and resource access risks, answering questions like "Who can gain Domain Admins privileges?" or "Who can read the CEO's emails?"
Security professionals, penetration testers, and system administrators responsible for auditing and securing Active Directory environments, particularly those needing to identify privilege escalation risks or compliance gaps.
It provides a scalable, graph-based approach to AD security auditing that handles large environments efficiently, supports offline analysis, and offers unique Exchange permission auditing capabilities not found in many generic AD tools.
Overview
Active Directory Control Paths auditing and graphing tools
Use Cases
Best For
- Identifying privilege escalation paths to sensitive groups like Domain Admins
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
