Today, privileges based on credentials are one of the lowest-hanging fruits in the attack chain. They are currently the easiest method for a threat actor to own a resource and, ultimately, the entire environment. These threats include
- 1.
Insiders having excessive and unmonitored access to accounts, opening the potential for misuse and abuse
- 2.
Insiders that have had their accounts compromised through successful phishing, social engineering, or other tactics
- 3.
Accounts that have been compromised as the result of weak credentials, passwords, devices, and application models, allowing attackers to compromise ...
