Skip to content
ADHardening

Area 12 / 12

Assessment, Backup & Recovery

You cannot harden what you have not measured, and you cannot recover from ransomware without a tested plan. This area runs assessments like PingCastle and Purple Knight against the Microsoft and CIS baselines, protects offline backups of Tier 0, and rehearses AD forest recovery.

Start the path

Learning path

0/4 done
  1. 01AD assessment, backup and forest recoveryRun recurring AD posture assessments against CIS and Microsoft baselines, protect Tier 0 backups, and rehearse forest recovery before you need it for real.
  2. 02PingCastle assessment: from AD report to action planRun a PingCastle health check on Active Directory, read the four risk scores correctly, triage findings into owners and sprints, and track progress over time.
  3. 03Protecting Active Directory backups from ransomwareDesign AD backups that survive ransomware: system state per domain, DSRM passwords, immutable and offline copies, a backup system outside the AD it protects.
  4. 04Writing and rehearsing an AD forest recovery planBuild an Active Directory forest recovery runbook from Microsoft's guide: clean room, first DC restore, SYSVOL, FSMO, RID pool, krbtgt resets and yearly drills.