Forest Druid

Malware Profile Updated 24 days ago
Download STIX
Preview STIX
Forest Druid is a malware that aids in visual mapping of risky access to privileged accounts. Developed by Semperis, an identity-driven cyber resilience solutions provider, Forest Druid has recently expanded its capabilities to include support for Microsoft Entra ID (formerly Azure AD). This expansion was announced during the week of October 13, 2023, and it aims to streamline the process for cybersecurity teams in identifying and closing risky attack paths across hybrid identity systems, thereby improving overall cyber defense. The integration of Microsoft Entra ID into Forest Druid comes on the heels of Semperis' recent announcement of support for Okta in Purple Knight, a popular vulnerability assessment tool downloaded by over 20,000 organizations. This addition underscores Semperis' mission to help organizations address emerging threats against both on-premises Active Directory (AD) and cloud identity systems. The goal is to better combat cybersecurity threats by providing comprehensive protection against potential breaches in on-premises Active Directory and cloud systems. Enhancements to Forest Druid include new settings to control data collection from on-premises and cloud identity systems, as well as new controls to improve the defense perimeter relationship graph. This graph serves as a map of objects with privileged relationships to Tier 0 assets. By identifying the true Tier 0 perimeter and prioritizing sensitive accounts for remediation, Forest Druid allows cybersecurity teams to save valuable time and resources while effectively safeguarding their identity systems against potential attacks.
Possible Aliases / Cluster overlaps
It's hard to track cluster overlaps and naming conventions between vendors, so here are some possible overlapping names / profiles you also may want to look at.
IDVotesProfile Description
Miscellaneous Associations
Other elements of context that could aid in the identification of relevance
Associated Malware
To see the evidence that has resulted in this association, create a free account
IDTypeVotesProfile Description
No associations to display
Associated Threat Actors
To see the evidence that has resulted in this association, create a free account
IDTypeVotesProfile Description
No associations to display
Associated Vulnerabilities
To see the evidence that has resulted in this association, create a free account
IDTypeVotesProfile Description
No associations to display
Source Document References
Information about the Forest Druid Malware was read from the documents corpus below. This display is limited to 20 results, create a free account to see more
SourceCreatedAtTitle
CERT-EU
a year ago
3 Steps to Protect AD from Wiperware
CERT-EU
8 months ago
Identity Management and Information Security News for the Week of October 13; Veza, Varonis, IOActive, and More
CERT-EU
8 months ago
Semperis expands Forest Druid attack path analysis tool to guard against Entra ID attacks
CERT-EU
8 months ago
Semperis Forest Druid to support Microsoft Entra ID enhancing cybersecurity
CERT-EU
7 months ago
Semperis attack path analysis tool upgraded with Microsoft Entra ID
CERT-EU
8 months ago
Semperis Expands Forest Druid Attack Path Analysis Tool to Guard Against Entra ID Attacks – Global Security Mag Online
CERT-EU
9 months ago
Semperis launched a security-centric Active Directory migration and consolidation solution. – Global Security Mag Online