Five Eyes Alliance recommends Purple Knight​

​

New guidance from the Governments of the Five Eyes Alliance recommends Semperis’ Purple Knight as a tool for detecting and mitigating common attack techniques used to exploit Microsoft Active Directory.

Purple Knight is a free tool that analyzes and assesses vulnerabilities in Active Directory, Entra ID and Okta.  Active Directory is the most widely used identity system, present in more than 80% of global companies.

“The Five Eyes’ comprehensive report on mitigating Active Directory risks highlights the urgent need to secure hybrid identity systems against today's cyber threats.  We are honored that Purple Knight is a recommended tool in the report,” comments Mickey Bresman, CEO, Semperis.

Participating co-authors of Detecting and Mitigating Active Directory include the Australian Signals Directorate, the U.S. Cybersecurity and Infrastructure Security Agency, the U.S. National Security Agency, the Canadian Centre for Cyber Security, the New Zealand National Cyber Security Centre and the United Kingdom’s National Cyber Security Centre.  The report provides guidance on 17 common attack techniques and how threat actors leverage them.

“Active Directory, Entra ID and Okta vulnerabilities can give attackers unrestricted access to an organization’s network and resources.  Semperis built Purple Knight to help companies discover indicators of exposure and indicators of compromise in their hybrid identity environments.  The tool has been downloaded by more than 30,000 organizations,” says Ray Mills, Regional Director, Iberia, Semperis.

“Recent guidance in the Five Eyes nations’ report is welcomed.  While perfect security is impossible, you can make your network defensible – and then you must defend it.  That defence is a mix of doctrine, upskilling and technology, all of which are essential; none on their own is sufficient,” says Chris Inglis, former U.S. National Cyber Director and current Strategic Advisor, Semperis.  “Organizations such as Semperis offer hybrid identity system security that will help global organizations improve their operational resilience against today’s ever-present attacks.”

Purple Knight can be downloaded free here.