| CISA

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock () or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Active Directory Identity Remediation

Details

ID: TMPL0004

Description

Countermeasures aiding in the recovery of an Active Directory Compromise, specifically for the identity aspect of Active Directory and other highly important countermeasures. This is intended to be edited to more accurately suit your environment and specifically target Threat Actor TTPs relevant to your compromise.