| CISA

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock () or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Active Directory General Remediation

Details

ID: TMPL0005

Description

The intended role of this template is to provide additional general guidance for Active Directory recovery. This includes a broad number of countermeasures to be used in addition after the execution of the Active Directory Identity template. This template is also intended to be edited to only include countermeasures that are relevant to your environment and what TTPs an Adversary has carried out within the environment.