Automated Framework for Active Directory Security and Compliance through Continuous Monitoring and Attack Path Validation
Gia-Huy Nguyen, Khai Tuan Nguyen, Minh-Tri Luu, Anh-Nhat Nguyen, Tung-Son Ngo · 2025
As cyber threats get more sophisticated and the attack surface expands, Active Directory (AD) has become a prominent target for attackers. Compromising AD can result in major security breaches and regulatory issues. This paper provides an automated AD security and compliance system that uses continuous monitoring security compliance and attack path validation to improve enterprises’ security posture. By continuously monitoring AD’s security posture and simulating real-world attack scenarios, the framework detects vulnerabilities, misconfigurations, and potential attack pathways in real-time. This proactive approach helps firms to discover and address security problems quickly, maintaining regulatory compliance and protecting vital assets. The framework’s automated features decrease the strain on security teams while also providing a full view of the AD environment, allowing for informed decision-making and effective risk management.