Tool
Purple Knight
- First Reported
- Apr 25, 2026
- Latest Reported
- Apr 25, 2026
Reported Context (1)
- Tools such as PingCastle, Purple Knight, and PowerShell’s Get-GPPermission surface this ACL drift on demand and should be run on a scheduled cadence. Lab Walkthrough Demonstrates Active Directory GPO Abuse and Defenses
MITRE ATT&CK (7)
Products (2)
Tools (8)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.