Welcome to the first in our three-part blog post series on Microsoft Active Directory data backup and recovery. This series will explore the criticality of AD in your resilience strategy and considerations for protection. Let’s begin with an introduction of why AD is so important.
Ransomware has become a perpetual game of cat and mouse. As IT and security teams strive to stay one step ahead, threat actors ruthlessly mine for new methods, means, and vectors for their exploits. Their latest focus is AD. As a core element of centralized management, AD has become a primary target and pathway to execute ransomware attacks. Now more than ever, it’s critical that today’s businesses consider AD protection in their overarching security and ransomware response strategies.
As Chaves do Castelo
Como ferramentas de autenticação amplamente adotadas por pequenas, médias e grandes empresas, o Microsoft AD e o Entra ID são os guardiões dos processos de autorização para redes, aplicativos e ambientes. O AD é o comandante do acesso ao sistema e controla um conjunto em constante mudança de usuários, grupos, políticas e permissões de aplicativos.
While AD simplifies the administration of access to key systems, it can be particularly challenging to secure as it holds the keys to an organization’s most crown jewels – its infrastructure and data. It also has become a data protection blind spot for many organizations. One misconfiguration, leaked password, or dormant account can enable a bad actor to elevate privileges and steal, corrupt, or deny access to critical applications and their data.
Inúmeras cargas de trabalho nas empresas dependem do AD para conceder aos funcionários acesso a sistemas críticos de negócios, essenciais para gerar receita, prestar atendimento aos pacientes, manter as operações de fabricação e apoiar iniciativas sem fins lucrativos. Sem o AD, as operações comerciais ficariam paralisadas.
Propagação de um ataque
Experts are finding AD is playing a key and increasingly larger role in executing attacks. In fact, um estudo da EMA Research showed that 50% of organizations experienced an attack on AD/Entra ID in the last one to two years. By exploiting blind spots, bad actors can compromise privileged accounts, mimic authorized users, and silently traverse infrastructure, workstations, and applications to establish their foothold. Failing to safeguard AD enables attackers with a centralized location to control and sever access to critical business assets.
Como a Commvault ajuda
Proteger o AD contra ransomware exige ferramentas específicas para a recuperação após ataques. E, embora algumas empresas tenham desenvolvido soluções próprias, a manutenção, a atualização e a administração dessas soluções são demoradas. Com o Commvault Cloud, você conta com uma proteção dedicada e em uma única solução para o Microsoft AD e o Entra ID, que ajuda a restaurar rapidamente seus dados.
Frequent backups enable users to undo damaging and unwanted changes to objects and attributes, including users, groups, app registrations, and more. Fast, granular recovery options allow administrators to view what’s changed in their environment and easily recover missing, damaged, or misconfigured items to thwart ongoing attacks.
Visit Commvault.com/platform/Active Directory to learn more about how Commvault helps safeguard AD against corruption, accidental deletion, or malicious attacks.
