Comparing Active Directory Assessments

Comparing Active Directory Assessments

The SmartProfiler is now capable of comparing Active Directory Assessments and assessments for other technologies such as Microsoft 365 and Azure and showing the result in the pane. The compare assessment tool provides following features:

  • Allows you to compare two or more Assessment Runs of Single AD Forest, M365 and Azure Tenants. For example, you can compare assessment of AD Forest A.Com and AD Forest B.Com.
  • Allows you to compare two or more Assessment Runs of multiple AD Domains of a single AD Forest. For example, you can compare Child.DynamicPacks.net domain and Example.DynamicPacks.net domains.

Opening Compare Assessments Console

To launch Compare Assessments pane, from left pane under “Master Console” pane click on “Compare Assessments” button, which, in turn, will open Compare Assessments pane:

Comparing Active Directory Assessments: Loading Assessment Runs

To start comparing assessment runs, click on “Select Assessment Runs” button:

You can compare assessment runs of three types of tenants: AD Forest, M365 and Azure. Select the Tenant Type in the “Select Compare Tenant Type” dropdown and then click on “Load Assessment Runs”. The process will load all assessment runs of managed tenants from the database as shown below:

As you can see, we selected “AD FOREST” tenant type and console populated all assessment runs available from all AD Forests.

In the list of Assessment Runs, select at least two Assessment Runs of single or multiple Tenants and then click on the “Select and Load” button. Once loaded, the process will fetch data from the selected Assessment Runs and load assessment runs results in the pane as shown below:

Comparing Active Directory Assessments

As you can see in the screenshot above, it has created a column for each assessment run you selected and shows the results for each assessment run for each Active Directory test. The assessment results for each assessment run is stored under C:\Users\Public\SmartProfiler\SmartProfilerAssessment\Data\TestStatus_<Assessment Run Name>.CSV file. Please ensure you have the required CSV files available before Compare Assessment console can show the results.

Exporting Compare Assessment Result for Reporting

In case you need to include the assessment runs result in the report, you need to export the assessment runs in a CSV file. To export, click on “Export Report” button and then provide the CSV file location. The CSV file then can be used while generating the report to show the results from two assessment runs in the report.

All of the tests shown as part of the Compare Assessment report are recommended by ANSSI, MITRE, and Microsoft.

Try SmartProfiler, a unified tool to help with security evaluation across many Microsoft technologies.

Translate »
Index