Stealthbits, Now Part of Netwrix, Introduces Active Directory Password Protection to Safeguard Organizations from Authentication-based Attacks

Stealthbits, now part of Netwrix, today announced the release of StealthINTERCEPT 5.2.

The sheer volume of unstructured data created by most enterprises presents significant monitoring challenges. Understanding who is accessing data and how it is being accessed is one of the largest gaps in data security protection programs. Activity monitoring provides the robust compliance and security coverage necessary for protecting your data, without the drawbacks associated with native auditing. To control the critical information stored in Windows file shares, SharePoint and Network-Attached Storage (NAS) devices such as NetApp, Dell EMC, Hitachi and Nasuni, it is necessary to be able to track the access and change events that are constantly occurring.

In 2016 the Verizon Data Breach Investigations Report (DBIR) stated that 63% of confirmed data breaches leverage a weak, default, or stolen password. The following year, the 2017 Verizon DBIR reported that 81% of hacking-related breaches leveraged either stolen and/or weak passwords. And in the 2018 DBIR, use of stolen credentials remains a number one action in breaches. Attackers have demonstrated a consistent ability to compromise accounts by leveraging passwords from prior breaches. For that reason, NIST Special Publication 800-63B (Authentication and Lifecycle Management, section 5.1.1.2*) recommends the use of “Memorized Secret Verifiers” such as the StealthINTERCEPT Enterprise Password Enforcer to reduce an attacker’s chances of compromising credentials.

Using a curated dictionary of known compromised passwords and dozens of password filters, StealthINTERCEPT Enterprise Password Enforcer safeguards your organization from authenticationbased attacks. This is accomplished by proactively preventing these weak and compromised passwords from being used – regardless of whether or not they meet complexity requirements – further enforcing password hygiene and reducing the opportunity for attackers to crack or guess passwords in automated or manual fashions.

Microsoft, based on billions of observed login attempts to its Azure cloud service, updated their password recommendations, as did the National Institute for Standards and Technology (NIST). Protecting credentials has always been part of our core mission here at Stealthbits and through our own observations, we knew that incorporating AD Password Protection into our Threat Protection solutions was the right decision for our customers.
Gabriel Gumbs, VP of Product Strategy at Stealthbits, now part of Netwrix

Learn more about StealthINTERCEPT 5.2 by visiting https://www.netwrix.com/stealthintercept.html