Power up Entra ID Security Assessments

Semperis introduces Lightning Intelligence, a SaaS tool that continuously scans AD and Entra ID, replacing Purple Knight's manual runs, with multi-forest dashboards and no agent required.

Purple Knight v4.2 revamps scoring to count only failed indicators, closer to real exposure severity. Category scores become independent metrics for tracking remediation progress.

Purple Knight 1.5 adds 10 Entra ID security indicators so organizations can assess gaps across on-prem AD and the cloud, plus MITRE D3FEND tags, seven new on-prem indicators, and enhanced HTML/PDF reporting.

Compares the free editions of Purple Knight and PingCastle: both assess Active Directory security and guide improvements, and the post outlines each tool's strengths to help organizations choose.

Webinar recap on applying MITRE ATT&CK to Active Directory: how attackers exploit AD, how techniques map to the framework, plus tooling for defense—and data belying attendees' confidence, with average Purple Knight scores at just 64%.

A hands-on checkpoint walking through Entra ID's three agent authentication flows (autonomous, OBO, agent-user), decoding tokens to show how claims map to blueprints, identities and permissions.