Anonymized case study
An AD DS review uncovered a shadow SQL fabric
The client already used Nessus scans and BloodHound to assess its environment. A deeper directory review surfaced SQL infrastructure that hadn’t appeared in the results the team had reviewed.
Where the review went deeper
Our principal built on the scan and graph findings by examining Active Directory Domain Services (AD DS) directly. That work uncovered a connected set of SQL systems outside the client’s documented inventory. It was shadow IT that the team could now account for.
Why the discovery mattered
Systems outside the inventory can also sit outside access reviews, patch tracking, and recovery planning. Finding the SQL fabric gave the client a specific environment to include when reviewing risk, ownership, and safeguards.