Exposure insights
Quick visual read of tiering, effort, account mix, and highest exposure groups.
Privilege tiers
Remediation effort
Account types
Top groups by exposure
Readiness scorecard
Control view for remediation planning. The target is all controls passing and exposure score at 0.
Fix now
Start here. These batches give the largest score reduction with the smallest review surface.
| Recommended action | Members | Findings | Score reduction | Top accounts |
|---|
Group exposure
Separate summary for prioritizing which sensitive groups need review first.
| Group | AD scope | Privilege tier | Members | Aggregate score | Bar |
|---|
Account exposure
Shows identities that appear through multiple sensitive paths.
| Account | Type | Paths | Groups | Total score | Why it matters |
|---|
Access paths
Operational queue sorted by score. Expand a row for UAC, ATT&CK, identity origin, dates, and score math.
| Score | Member | Group | Tier | Type | Status | Access path | Why this matters | Difficulty | Fix | Details | Script |
|---|
Safe playbooks
Central remediation queue for ACL, GPO, ADCS, DNS, and sensitive-group findings. Scripts are review-ready and use WhatIf when deterministic; ambiguous changes stay blocked with a reason.
| Domain | Finding | Eligibility | Expected impact | Open |
|---|
Remediation script
Select a finding to generate a review-ready PowerShell script.
No script generated yet.