Active Directory Password Strength Assessment

A password strength audit will help you identify weak Active Directory passwords that are currently in use by your employees.

Contact a Specialist Read More About Schellman's Approach

What Happens During an AD Password Strength Assessment?

Are your employees using passwords that are easily guessable due to their length or complexity? Or were they leaked from previous data breach incidents? This analysis of the strength of your organization's passwords will identify patterns and trends of the passwords in use by your teams and provide you with justification to update password policies.

Assessing Your Password Strength Can Help You:

https://www.schellman.com/hubfs/improve-security.png

Strengthen a Common Entry Point for Attackers

In today's digital age, the risk of exposure to password breaches is higher than ever before, and this assessment will help you avoid falling into this typical security gap.

https://www.schellman.com/hubfs/improve-security-posture-2.svg

Highlight Weak Passwords

Cracking passwords is a common entry point for attackers. Our audit will identify the passwords used within your organization that need to be strengthened.

Password Reuse Metrics

Highlight how frequently the same password is reused through the environment.

https://www.schellman.com/hubfs/staff-awareness.svg

Drive Change Internally

Evidence to push change towards a stronger password policy.

Dedicated Cracking Power

You’ll have one week of 24/7 dedicated cracking time on our multi-GPU cracking rig.

Schellman’s Active Directory Password Strength Assessment Methodology

Along with our dedicated multi-GPU powered hardware with multiple high-end graphics cards, we will use brute force to crack your Active Directory users’ password hashes before providing you with the discovered metrics and insight into how many users are choosing passwords that have been previously disclosed in past breaches or can be cracked due to using predictable formats (e.g., Winter2023!).

Afterward, we’ll walk you through how to securely supply the password hashes for all domain users and then see how many can be guessed using an offline attack.

Is Schellman the Right Firm for You?

Schellman does perform password strength assessments—our Penetration Testing Team continues to grow and is currently comprised of individuals from different backgrounds including former developers, system administrators, and lifelong security professionals. Our team is incredibly experienced, and collectively holds the following professional certifications, among others: