Welcome to the first in our three-part blog post series on Microsoft Active Directory data backup and recovery. This series will explore the criticality of AD in your resilience strategy and considerations for protection. Let’s begin with an introduction of why AD is so important.
Ransomware has become a perpetual game of cat and mouse. As IT and security teams strive to stay one step ahead, threat actors ruthlessly mine for new methods, means, and vectors for their exploits. Their latest focus is AD. As a core element of centralized management, AD has become a primary target and pathway to execute ransomware attacks. Now more than ever, it’s critical that today’s businesses consider AD protection in their overarching security and ransomware response strategies.
Las llaves del castillo
Como herramientas de autenticación ampliamente utilizadas por pequeñas, medianas y grandes empresas, Microsoft AD y Entra ID son los guardianes de los procesos de autorización para redes, aplicaciones y entornos. AD es el cerebro del acceso al sistema y gestiona un conjunto en constante evolución de usuarios, grupos, políticas y permisos de aplicaciones.
While AD simplifies the administration of access to key systems, it can be particularly challenging to secure as it holds the keys to an organization’s most crown jewels – its infrastructure and data. It also has become a data protection blind spot for many organizations. One misconfiguration, leaked password, or dormant account can enable a bad actor to elevate privileges and steal, corrupt, or deny access to critical applications and their data.
Numerosas tareas dentro de las empresas dependen de AD para conceder a los empleados acceso a sistemas empresariales críticos que son esenciales para generar ingresos, prestar asistencia a los pacientes, mantener las operaciones de fabricación y apoyar iniciativas sin ánimo de lucro. Sin AD, las operaciones empresariales se paralizarían por completo.
Propagación de un ataque
Experts are finding AD is playing a key and increasingly larger role in executing attacks. In fact, un estudio de EMA Research showed that 50% of organizations experienced an attack on AD/Entra ID in the last one to two years. By exploiting blind spots, bad actors can compromise privileged accounts, mimic authorized users, and silently traverse infrastructure, workstations, and applications to establish their foothold. Failing to safeguard AD enables attackers with a centralized location to control and sever access to critical business assets.
Cómo ayuda Commvault
Para proteger Active Directory (AD) frente al ransomware se necesitan herramientas diseñadas específicamente para recuperarse de los ataques. Y, aunque algunas empresas han desarrollado soluciones propias, su mantenimiento, actualización y administración requieren mucho tiempo. Con Commvault Cloud, dispondrás de una protección dedicada y en una única solución para Microsoft AD y Entra ID que te ayudará a restaurar rápidamente tus datos.
Frequent backups enable users to undo damaging and unwanted changes to objects and attributes, including users, groups, app registrations, and more. Fast, granular recovery options allow administrators to view what’s changed in their environment and easily recover missing, damaged, or misconfigured items to thwart ongoing attacks.
Visit Commvault.com/platform/active-directory to learn more about how Commvault helps safeguard AD against corruption, accidental deletion, or malicious attacks.
