CISA Maps 17 Attack Techniques Targeting Active Directory
CISA released a guide detailing 17 techniques commonly used by attackers to compromise Active Directory, highlighting AD as a critical attack surface and outlining defender-focused mitigations such as least-privilege access, MFA, credential hygiene, disabling legacy protocols, and continuous monitoring of authentication and privilege activity.