Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Purple Knight and PingCastle: A Quick Comparison

semperis.com | blog | #cloud | #active-directory | #tooling | #assessment | #purple-knight | #pingcastle

Summary

Compares the free editions of Purple Knight and PingCastle: both assess Active Directory security and guide improvements, and the post outlines each tool's strengths to help organizations choose.
Published
Collected

original ↗

Related coverage

blog · semperis.com
Why Upgrade to Lighting Intelligence from Purple Knight
Semperis introduces Lightning Intelligence, a SaaS tool that continuously scans AD and Entra ID, replacing Purple Knight's manual runs, with multi-forest dashboards and no agent required.
blog · semperis.com
Purple Knight Scoring Improves Understanding of Identity System Security Vulnerabilities
Purple Knight v4.2 revamps scoring to count only failed indicators, closer to real exposure severity. Category scores become independent metrics for tracking remediation progress.
blog · semperis.com
Power up Entra ID Security Assessments
Semperis offers a PowerShell script that automates Entra ID app registration for free Purple Knight assessments, requiring Microsoft.Graph.Applications, Az.Accounts, and Global Admin rights.
blog · semperis.com
Purple Knight Introduces Entra ID (formerly Azure AD) Security Indicators
Purple Knight 1.5 adds 10 Entra ID security indicators so organizations can assess gaps across on-prem AD and the cloud, plus MITRE D3FEND tags, seven new on-prem indicators, and enhanced HTML/PDF reporting.
blog · semperis.com
Applying the MITRE ATT&CK Framework to Your Active Directory
Webinar recap on applying MITRE ATT&CK to Active Directory: how attackers exploit AD, how techniques map to the framework, plus tooling for defense—and data belying attendees' confidence, with average Purple Knight scores at just 64%.
blog · projectblack.io
Should I Azure AD Sync/Entra Cloud Sync Domain Admins?
Syncing Domain Admins into Entra ID lets attackers pivot from compromised on-prem AD to the cloud, and back via password writeback. CIS and Microsoft advise keeping privileged admin accounts cloud-only.
back