AD password audit

PT-1828 · AD password audit · Corporate · started Oct 30, 2026, 1:20 PM CDT from Directory replica, read-only.

What the run did

Complete

100% · production-safe mode

Oct 30, 2026, 1:20 PM CDTPassword audit compared directory hashes to known-breached secrets. No spraying.
Oct 30, 2026, 1:34 PM CDTj.okonkwo, Domain Admin, still matches a breached password. One replay was accepted.

Open path

An AD password audit replayed one breached password. j.okonkwo logged on. MFA was not required.

Loading the run…