Integration > Microsoft Active Directory
Microsoft Active Directory
Dominant enterprise directory service. CBOM Secure runs a 10-phase scan over LDAP v3 and Global Catalog supporting multi-forest/multi-domain enumeration, discovering user/computer certs, NGC keys, gMSA master keys, krbtgt signing keys, DPAPI backup keys, BitLocker recovery info, and AD CS hierarchy.
Use Cases
Inventory cryptographic material across Active Directory using a comprehensive 10-phase multi-forest discovery scan.
Ten-Phase Discovery
Covers certificates, NGC keys, gMSA, krbtgt, DPAPI, BitLocker, and AD CS hierarchy.
Multi-Forest Coverage
Supports multi-forest and multi-domain enumeration over LDAP v3 and Global Catalog.
AD CS Hierarchy
Discovers CA hierarchy with NTAuth store visibility and cross-certificate pair enumeration.
Integrations and Resources
CBOM Secure
Microsoft Active Directory
Dominant enterprise directory service underpinning Windows identity and authentication.