Finding detail
Finding
Loading this identity.
Workspace /Workspace
Finding detail
Loading this identity.
Review
Compare
Reference
Workspace /Finding
Finding detail
Evidence, the score breakdown, and the analyst’s decision for this identity.
Generate guidance covering what deserves attention, a possible consequence, and how to validate it.
Each line is a pilot rule. The total is capped at 100.
Membership in a privileged AD group
Suggested action. Review administrative membership and confirm the business need.
Validation. Confirm the account is no longer in the privileged group, then review a fresh dataset.
PasswordNeverExpires is enabled
Suggested action. Review the credential lifecycle and the controls this account is allowed to use.
Validation. Confirm PasswordNeverExpires is cleared, or record an approved exception.
This score is a rule result, not a probability of compromise.
The service-account label was inferred from the name. Identity type is context and does not add risk points, so the score stays 85.
Reviewed and Action Planned record Alex Morgan’s judgment. Neither status means the account was fixed.
Status: New.