Internal Penetration Testing
Ethical hacking inside the network that models a compromised user, rogue employee or actor with physical access.
Know when to bring this work into the program.
Use internal penetration testing to model a compromised employee, rogue insider or attacker who has gained a foothold inside the network.
A scope built around the risk.
Ethical hacking inside the network that models a compromised user, rogue employee or actor with physical access.
- Credential exposure and authentication weaknesses
- Network segmentation and lateral movement
- Active Directory escalation paths
- Access to sensitive systems, data and administrative control
Useful output for the people who must act.
- Narrative of validated attack paths
- Technical evidence and affected assets
- Prioritized containment and hardening actions
- Retesting of material remediation
A process designed for internal penetration testing.
Establish the foothold
Begin with credential exposure and authentication weaknesses and confirm the systems, people and evidence needed to answer the client’s specific questions.
Capture and move
Review network segmentation and lateral movement. Then evaluate active Directory escalation paths to determine whether the relevant controls operate as intended.
Escalate access
Assess access to sensitive systems, data and administrative control and connect the result to credible security, operational and business impact.
Contain and retest
Provide narrative of validated attack paths and technical evidence and affected assets, then align responsible parties around the next actions.
Move from activity to clarity.
How far can a standard user or device reach?
To answer this, Elteni analyzes credential exposure and authentication weaknesses together with network segmentation and lateral movement. The client receives narrative of validated attack paths, with the evidence, context and next steps needed to act.
Can credentials be captured, reused or elevated?
To answer this, Elteni analyzes network segmentation and lateral movement together with active Directory escalation paths. The client receives technical evidence and affected assets, with the evidence, context and next steps needed to act.
What controls would detect or stop lateral movement?
To answer this, Elteni analyzes active Directory escalation paths together with access to sensitive systems, data and administrative control. The client receives prioritized containment and hardening actions, with the evidence, context and next steps needed to act.
The result does not have to live in another report.
Relevant findings, evidence, owners and remediation status can be centralized in the Elteni Platform as part of an ongoing relationship.
Explore the Elteni Platform →