Observed arrival · 2026-11-07
Castelid’s guarded path to Active Directory remediation
Castelid describes a security tool that maps attack paths in Active Directory, AD CS and Microsoft Entra ID, then prepares fixes for approval before any changes are made.
- For
- Active Directory and Entra ID security teams
- Worth noticing
- The page describes 68 analysis rules across 10 domains and labels its seven-path walkthrough as a demonstration on fictional data.
Field notes
The workflow distinguishes three modules: Vigie collects and analyzes, Rempart applies approved changes, and Garde checks the result. The page says read and write identities are separate, permissions are backed up before each batch, and changes are journaled. Its demonstration shows seven paths and a two-fix batch, but is explicitly based on fictional data; the listed rule counts and safeguards are descriptions on the site, not independently verified results.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue