Identify service and domain accounts that may contribute to your organization's attack surface.
Attack Surface Discovery detects your organization's domain and service accounts using
your connected data sources. After assessment, the accounts are categorized and assigned
a risk score if there are risks or vulnerabilities associated with the account. The
domain and service account lists allow you to identify highly-privileged accounts
and take action on accounts that have excess privileges or display risky activity
or behavior.
The following features are available in the Accounts section of Attack Surface Discovery.
Feature
|
Description
|
Domain accounts overview
|
In the Domain accounts tab, view the total discovered domain accounts over time organized into member and
guest accounts.
|
Domain accounts contributing data sources
|
In the Domain accounts tab, view the data sources that contribute to account discovery along with the data
source connection status.
|
Domain account list
|
Displays all visible domain accounts, identifies highly-privileged accounts, and allows
you to view detailed risk profiles
|
Service account overview
|
In the Service accounts tab, view the total discovered service accounts over time.
|
Service account contributing data sources
|
In the Service accounts tab, view the data sources that contribute to account discovery along with the data
source connection status.
|
Service account list
|
|