Audit · overview

Dashboard

Domain acme.corp · 2,356 objects analyzed · last scan on Jun 15, 2026

Global risk score

lower = better

86

/ 100 pts

Critical

Maturity level2 / 5

CMMI model · 1 (low) → 5 (optimal)

driving category : Anomalies · 20 Open

Risk by category

pts / 100

Stale objects 45 Privileged accounts 63 Trust relationships 30 Anomalies 86

Risk profile

User accounts

1,250

1,155 enabled · 95 disabled

Computers

900

112 servers · 788 workstations

Groups

180

12 privileged

GPOs

26

20 linked

Privileged accounts

14

members of admin groups

Controllers

4

4 global catalogs

Trusts

3

1 without SID filtering

Detected issues

20

10 critical to address

Risk score evolution

last 90 days · lower = better

86

Global risk score

▼ 0 pts

last 90 days · lower = better

Priority issues

View all findings ›

Password in a GPP (SYSVOL) Critical

Anomalies · 20 pts · 1 objects

Trust without SID filtering High

Trust relationships · 20 pts · 1 objects

Unconstrained Kerberos delegation Critical

Privileged accounts · 20 pts · 7 objects

LDAP signing not required High

Anomalies · 15 pts · 4 objects

Service account in Domain Admins High

Privileged accounts · 15 pts · 1 objects

Framework coverage

23%

ANSSI · 20 Open / 26

16%

CIS · 16 Open / 19

17%

MITRE ATT&CK · 19 Open / 23

23%

MITRE D3FEND · 20 Open / 26

Operating systems (workstations)

Windows 11 23H2

252

Windows 10 22H2

246

Windows 11 22H2

126

Windows 10 21H2

121

Windows 8.1

24

Windows 7 SP1

19

Recent domain activity

Full domain scan completed

today

New GPP with password detected

today

Service account added to Domain Admins

yesterday

LDAP signing fixed on DC02 (pending scan)

2 days ago

Scheduled LDAP collection ran

3 days ago

3 new accounts inactive > 90 d

4 days ago

SMBv1 disabled on all DCs

6 days ago