Semperis expands Forest Druid

The pioneering identity-driven cyber resilience for enterprise leader Semperis (www.semperis.com) announces the addition of Entra ID to Forest Druid, its community-driven attack path management tool.

Unlike conventional Active Directory (AD) attack path management tools that require defenders to scrutinize countless possible attack paths, Forest Druid accelerates attack path analysis by focusing on Tier 0 assets –accounts, groups, and other assets that have direct or indirect administrative control of an AD or Entra ID environment.  With access to Tier 0 assets, attackers can seize control of the entire network.

“Since its introduction in fall 2022, Forest Druid has helped thousands of cybersecurity defenders cut the time it takes to identify attack paths and remove excessive privileges in Active Directory,” explains Darren Mar-Elia, Vice President of Products, Semperis.  “By expanding Forest Druid to encompass Entra ID, security teams can now uncover risky access to Tier 0 assets across hybrid identity environments, which have become a favourite target for cyber-attackers.  These recent enhancements in both Forest Druid and Purple Knight address concerns we’ve heard from our customer community about emerging attacks that target Entra and Okta, in addition to legacy AD environments.”

“Cyber defenders too often are racing against time to close security gaps before adversaries exploit them.  As more organizations are embracing cloud identity systems such as Entra ID and Okta – often using them in conjunction with on-prem AD – the attack surface expands, giving malicious actors more opportunities to breach the environment and deploy malware.  Forest Druid helps defenders visually map risky access to privileged account,” adds Ran Harel, Associate Vice President of Security Products, Semperis.  “By identifying the true Tier 0 perimeter and prioritizing sensitive accounts for remediation, cybersecurity teams save valuable time and resources in safeguarding the identity system.”

Closely following the recent announcement (www.itceoscfos.com/purple-knight-now-protects-okta) of support for Okta in Purple Knight, the popular vulnerability assessment tool downloaded by 20,000-plus organizations, the addition of Entra ID support in Forest Druid underscores the company’s mission to help organizations address emerging threats against on-premises Active Directory (AD) and cloud identity systems.