White PaperFeb 2026
Identity Attack Paths: Practical Risk Reduction in Enterprise AD
A practitioner guide to discovering, prioritizing, and eliminating identity-based attack paths in Active Directory.
White Papers
Practical research and technical guidance for reducing identity exposure in Active Directory and hybrid environments.
Featured Publications
Technical BriefFeb 2026
Shadow Admins: Hidden Privilege in Active Directory
How effective privilege diverges from explicit group membership and why shadow admins are a critical blind spot.
White PaperJan 2026
Compliance Scoring for GPO Baselines (CIS / Microsoft)
Automate GPO compliance scoring against CIS and Microsoft baselines with gap analysis and remediation guidance.
White PaperFeb 2026
Identity Attack Paths: Practical Risk Reduction in Enterprise AD
A practitioner guide to discovering, prioritizing, and eliminating identity-based attack paths in Active Directory.
Technical BriefFeb 2026
Shadow Admins: Hidden Privilege in Active Directory
How effective privilege diverges from explicit group membership and why shadow admins are a critical blind spot.
White PaperJan 2026
Compliance Scoring for GPO Baselines (CIS / Microsoft)
Automate GPO compliance scoring against CIS and Microsoft baselines with gap analysis and remediation guidance.
Research NoteJan 2026
Credential Exposure: Where Secrets Hide in Real Environments
Field research on the most common locations and patterns for exposed credentials in enterprise Active Directory.
White PaperDec 2025
Identity Resilience: A Practical Definition and Measurement Model
A framework for defining, measuring, and improving identity resilience as a board-level security metric.
Technical BriefDec 2025
Multi-Forest Identity Visibility: Common Challenges and Patterns
Practical patterns for achieving unified identity visibility across multiple AD forests and trust relationships.
White PaperNov 2025
From Finding to Fix: Safe Remediation in Large AD Estates
A workflow-driven approach to prioritizing and safely remediating identity findings at enterprise scale.
Technical BriefNov 2025
Incident Response: Investigating Identity Changes Efficiently
How to investigate identity-related changes during a security incident with full timeline context.
Research NoteOct 2025
Attack Path Choke Points: Reducing Blast Radius Fast
Research on identifying and remediating choke points that disproportionately reduce identity attack surface.
Compliance MappingOct 2025
Compliance Mapping Pack: Example Reporting Outputs
Sample compliance mapping outputs showing how Forestall maps findings to controls frameworks.