Active Directory (AD) is a directory service developed by Microsoft for Windows domain networks. It is most organizations’ primary store for employee authentication and identity management. This makes Active Directory a valuable target for attackers and spur organizations to improve its security. Guido Grillenmeier was a Microsoft MVP for Active Directory Services for 12 years. He says AD is being too easily compromised and allows intruders to gather intelligence of a company’s IT assets, steal corporate data and then request ransom payments.
Source: https://www.helpnetsecurity.com/2021/07/06/improve-active-directory-security/