SkyArk

SkyArk是一个云安全项目，包含两个主要扫描模块： 1. AzureStealth - 扫描Azure环境 2. AWStealth - 扫描AWS环境 这两个扫描模块将发现目标AWS和Azure中权限最高的实体。 主要目标 - 发现权限最高的云用户 SkyArk目前专注于缓解云影子管理员这一新威胁，并帮助组织发现、评估和保护云中的特权实体。 隐形和潜伏的云管理员可能存在于每个公有云平台中，SkyArk有助于降低AWS和Azure中的风险。 在防御/渗透测试/风险评估流程中 - 请确保应对这一威胁，并验证这些特权实体确实得到了良好的保护。 背景：...

ACLight

ACLight 用于高级发现特权账户的工具 - 包括影子管理员（Shadow Admins）。 ACLight2 是该工具的改进版本。 影子管理员研究 该工具（版本1）作为"影子管理员"研究的一部分发布——关于"影子管理员"的更多详情请见博文：https://www.cyberark.com/threat-research-blog/shadow-admins-stealthy-accounts-fear 该研究也曾在伦敦InfoSecurity大会上展示：演示链接 概览 ACLight 是一款通过高级 ACL 分析（对象 ACL——访问控制列表，亦称...

Identity in the Shadows: Shedding Light on Cybersecurity's Unseen Threats

In today's rapidly evolving digital landscape, organizations face an increasingly complex array of cybersecurity threats. The proliferation of cloud services and remote work arrangements has heightened the vulnerability of digital identities to exploitation, making it imperative for businesses to...

Webinar: Learn How to Stop Hackers from Exploiting Hidden Identity Weaknesses

We all know passwords and firewalls are important, but what about the invisible threats lurking beneath the surface of your systems? Identity Threat Exposures ITEs are like secret tunnels for hackers – they make your security way more vulnerable than you think. Think of it like this:...

Tackling the New Cyber Insurance Requirements: Can Your Organization Comply?

With cyberattacks around the world escalating rapidly, insurance companies are ramping up the requirements to qualify for a cyber insurance policy. Ransomware attacks were up 80% last year, prompting underwriters to put in place a number of new provisions designed to prevent ransomware and stem t...

SkyArk - Helps To Discover, Assess And Secure The Most Privileged Entities In Azure And AWS

SkyArk is a cloud security project with two mainscanning modules: 1. AzureStealth - Scans Azure environments 2. AWStealth - Scan AWS environments These two scanning modules will discover the most privileged entities in the target AWS and Azure. The Main Goal - Discover The Most Privileged Cloud...

ACLight - PowerShell Script for Advanced Discovery of Privileged Accounts (includes Shadow Admins)

ACLight is a tool for discovering privileged accounts through advanced ACLs Access Lists analysis. It includes the discovery of Shadow Admins in the scanned network. The tool queries the Active Directory AD for its objects' ACLs and then filters and analyzes the sensitive permissions of each one...

Advanced Discovery of Privileged Accounts: ACLight

ACLight is a tool for discovering privileged accounts through advanced ACLs Access Lists analysis. It includes the discovery of Shadow Admins in the scanned network. The tool queries the Active Directory AD for its objects’ ACLs and then filters and analyzes the sensitive permissions of each one...