From itproportal.com
Over 90% of the Fortune 1000 use Microsoft Active Directory (AD) for identity and access management, making it one of the most common pieces of software in the world.
Unfortunately, this ubiquity also makes it an attractive target for cyberattackers. Since Active Directory controls which users have access to the systems and software on a network, attackers can compromise it and give themselves the access levels they need to accomplish their goals. In addition, getting control of Active Directory allows an attacker to deploy ransomware, steal sensitive information, or do other nefarious acts – and it can be nearly impossible for a defender to stop them.