See who can reach critical systems.
Identify accounts, groups and roles with paths to privileged control in your scoped identity environment.
Minerva Shield / Identity Risk
One compromised account.
How far could it go?
Permissions can give a stolen login more reach than anyone intended. Minerva Shield maps paths to privileged control in your identity environment, so your team knows which relationships to address first.
.svg)
What Shield reveals
See how everyday access
can lead to greater control.
Connect permissions, accounts and applications to the systems that matter most.
See the identity paths your team should investigate first.
Understand the paths to control.
Connect permissions and relationships to see how one compromised account could gain greater access.
Focus the next identity fix.
Review the misconfigurations behind the paths, with evidence to guide validation and remediation.
From evidence to action
A clearer order
for identity fixes.
Your team needs to understand which access relationships create risk—and where a change could interrupt a path. Shield brings those connections into a prioritized report.
A leadership summary
Understand the identity exposure and the attack chains that deserve attention, without having to interpret a permissions graph.
Paths with supporting detail
Follow the accounts, groups and permissions involved in each reported chain. Give technical teams the context to validate the finding.
Remediation priorities
Focus the next review on the permissions and misconfigurations behind the paths, with recommendations to guide your team.
Minerva Shield
Identity review
Privileged access
Accounts. Groups. Roles.
Attack paths
The relationships that connect them.
Remediation priorities
Where to focus the next review.
MNote from Minerva
A standard account can modify a privileged group. Review the permissions creating this path.
How Shield works
Map the relationships.
Understand the exposure.
Framework Security agrees the identity scope with you, analyzes collected directory data and helps your team interpret the results.
01
Define the environment
Agree which Active Directory or Azure identity environment to review, the data collection requirements and the systems that matter most.
02
Analyze the paths
Build the relationship graph, identify privileged targets and examine the access paths and misconfigurations that connect to them.
03
Prioritize the response
Review the findings with Framework Security and decide which permissions or configurations your team should investigate and change.
Where Shield fits
Built for complex
identity environments.
Use Shield when you need to understand the consequences of accumulated permissions, delegated administration and application access.
Which environments can Shield assess?
Shield analyzes Active Directory data collected with SharpHound or Azure identity data collected with AzureHound. Each environment is assessed in a separately scoped analysis.
Does Shield attempt to exploit the paths?
Shield analyzes relationships in the supplied data. A reported path is a basis for validation and remediation planning; it is not proof that an attacker has used it.
Will Shield change our permissions?
The assessment produces findings and recommendations. Your team can use them to plan changes with Framework Security; analysis does not automatically remove access.
How current are the findings?
Findings reflect the collected directory data. Agree collection timing and any follow-up assessment around changes to your environment.
MINERVA SHIELD
Understand where
one account could lead.
Talk through your identity environment with Framework Security. We’ll help define a Shield assessment around the access that matters to your business.
