Semperis Expands Forest Druid Attack Path Analysis Tool to Guard Against Entra ID Attacks
October 2023 by Marc Jacob
Semperis announced the expansion of Forest Druid, its community-driven attack path management tool, to include support for Microsoft Entra ID (formerly Azure AD), saving time for cybersecurity teams in identifying and closing risky attack paths across hybrid identity systems.
Closely following the recent announcement of support for Okta in Purple Knight, the popular vulnerability assessment tool downloaded by 20,000-plus organizations, the addition of Entra ID support in Forest Druid underscores the company’s mission to help organizations address emerging threats against on-premises Active Directory (AD) and cloud identity systems.
Unlike conventional AD attack path management tools that require defenders to scrutinize countless possible attack paths, Forest Druid accelerates attack path analysis by focusing on Tier 0 assets—accounts, groups, and other assets that have direct or indirect administrative control of an AD or Entra ID environment. With access to Tier 0 assets, attackers can seize control of the entire network.
Forest Druid enhancements include new settings to control data collection from on-prem and cloud identity systems and new controls to improve the defense perimeter relationship graph, a map of objects with privileged relationships to Tier 0 assets.