--- title: Defending Against Credential Based Attacks by Protecting the Keys to the Front Door | Vandis description: Vandis aggregates the latest in security, infrastructure, and virtualization news, industry trends, whitepapers and products so you can stay informed. image: https://vandis.com/hubfs/Imported_Blog_Media/maxim-zhgulev-5tmitjfhkic-unsplash-Jun-05-2025-06-58-59-5291-PM.jpg --- - [ Insights ](https://vandis.com/insights) - [ Our Portfolio ](https://vandis.com/case-studies) - [ Contract Vehicles ](https://vandis.com/contract-vehicles) [![Vandis](https://vandis.com/hs-fs/hubfs/raw_assets/public/vandis-u4m/templates/images/Logo.png?width=378&height=84&name=Logo.png "Vandis")](https://www.vandis.com) - Services ** ** - Solutions ** ** - [ Partners ](https://vandis.com/vandis-partners) - Resources ** ** - Who We Are ** ** [ Contact Us ](https://vandis.com/contact-vandis) ** May 18, 2020 # Defending Against Credential Based Attacks by Protecting the Keys to the Front Door Written by: [Vandis](https://vandis.com/insights/author/vandis) [mailto:?subject=Check%20out%20https://vandis.com/insights/defending-against-credential-based-attacks-by-protecting-the-keys-to-the-front-door](mailto:?subject=Check%20out%20https://vandis.com/insights/defending-against-credential-based-attacks-by-protecting-the-keys-to-the-front-door) ![password security](https://vandis.com/hubfs/Imported_Blog_Media/maxim-zhgulev-5tmitjfhkic-unsplash-Jun-05-2025-06-58-59-5291-PM.jpg) Most organizations rely on directory services such as Active Directory (AD) to grant users access to an account by verifying user credentials based on a username and password. Due to the importance of this information, organizations must remain vigilant to stop hackers from stealing legitimate credentials and gain access to the network. To combat against credential-based attacks, organizations have sought to implement solutions such as Multifactor Authentication (MFA) or Privileged Access Management (PAM). But even with these solutions in place, there are gaps that organizations can bridge with Deception Technology. In order to understand how Deception Technology can assist your security posture, it’s best to first understand how Multifactor Authentication and Privileged Access Management work. ### Multifactor Authentication Management (MFA) [Multifactor Authentication](https://vandis.com/insights/the-importance-of-multi-factor-authentication-for-your-remote-workers/) prevents unauthorized access by requiring at least two independent types of verification that must be presented at the time of login. These factors can include a combination of the following: - Something one knows – this can be a password or security question - Something one has – token or authentication app - Something one is – biometrics such as facial recognition or fingerprints - Somewhere one is – geofencing or location-aware apps - Something one does – typing speed, gestures The logic behind this method is that a legitimate user will have the answer to any one of the combinations listed above, whereas an illegitimate user would not. ### Privileged Access Management (PAM) Privileged Access Management is for special user accounts such as system administrators, whose duties require them to access critical assets. PAM secures, controls, manages, and monitors these privileged accounts to prevent misuse. It works by storing these privileged account credentials inside a secure repository and isolating their use to reduce the risk of theft. Systems administrators are required to check out the privileged credential from the PAM in order to use it. The credential is only valid for a limited period or specific number of uses before it becomes invalid. The PAM authenticates and logs each access and sends an alert on any suspicious behavior. When the administrator checks the privileged credential back in, the PAM resets it to prevent further use. ### How Deception Technology Can Help While MFA and PAM work for their intended use, they are not an all-in-one remedy for credential-related compromises. MFA covers the initial login but does not protect against non-interactive logins or memory-resident theft of access tokens. PAM protects privileged accounts but does not protect against the openness of Active Directory where attackers can find overlapping permissions and privileges. Organizations that implement both solutions can bridge the gap in coverage by deploying a Deception Technology solution such as Attivo Networks ThreatDefend Platform’s EDN (Endpoint Detection Net) suite, particularly the ThreatStrike and ADSecure solutions. These solutions help to strengthen endpoint defenses against credential-based exploitation. ThreatStrike solution creates and stores fake credentials on user systems and servers, both in credential storage and within memory. When attackers steal the locally stored credentials, they will also take the fake credentials, which leads to decoys on the network and if followed, will initiate an alert. ADSecure solution detects and alerts unauthorized Active Directory (AD) queries from tools like PowerShell or Bloodhound. When the AD controller replies with the query results, the ADSecure solution replaces the critical accounts with fake data that leads to the decoys. When attackers follow this data, they end up in the deception environment. To read more about MFA, PAM and how Attivo Networks Endpoint Detection Net suite can help increase your [security posture](https://vandis.com/services/cyber-security/), download the full article [here](https://vandis.com/media/1908/attivo_networks-defending_against_credential_based_attacks_whitepaper.pdf). Tag(s): [Security & Cybersecurity](https://vandis.com/insights/tag/security-cybersecurity) , [endpoint protection](https://vandis.com/insights/tag/endpoint-protection) ## [Vandis](https://vandis.com/insights/author/vandis) ### Blog Post Cards View All Posts June 15, 2026 ##### [ Securing AI in Practice: How Vandis and F5 Approach the Controls ](https://vandis.com/insights/securing-ai-in-practice-how-vandis-and-f5-approach-the-controls) [Artifical intelligence](https://vandis.com/insights/tag/artifical-intelligence) June 1, 2026 ##### [ Why AI Has Outpaced Enterprise Security and What Changes Now ](https://vandis.com/insights/why-ai-has-outpaced-enterprise-security-and-what-changes-now) [Artifical intelligence](https://vandis.com/insights/tag/artifical-intelligence) February 12, 2026 ##### [ Vandis Named to CRN's MSP 500 List for 2026 ](https://vandis.com/insights/vandis-named-to-crns-msp-500-list-for-2026) [Managed services](https://vandis.com/insights/tag/managed-services) ### Keep In Touch With Vandis Stay up-to-date on the latest in cyber security, networking and connectivity, and cloud solutions [![Vandis](https://vandis.com/hs-fs/hubfs/raw_assets/public/vandis-u4m/templates/images/Logo.png?width=209&height=467&name=Logo.png "Vandis")](https://vandis.com/) Tailored security and networking guidance: Building a secure and optimized network for your hybrid environment. **Corporate Office** 1 Albertson Avenue Albertson, NY 11507 **Phone: [(516) 281-2200](tel:5162812200)** **Toll Free: (800) 397-3146** **Fax: (516) 626-9003** - Services - [Professional Services](https://vandis.com/professional-services) - [Managed Services](https://vandis.com/managed-services) - [Project Management Services](https://vandis.com/project-management-services) - Solutions - [Cyber Security](https://vandis.com/cyber-security) - [Networking & Connectivity](https://vandis.com/networking-and-connectivity) - [Cloud Solutions](https://vandis.com/cloud-solutions) - Partners - [Our Partners](https://vandis.com/vandis-partners) - Resources - [Resources Library](https://vandis.com/resources) - [Events](https://vandis.com/events) - [Blog](https://vandis.com/insights) - [Our Portfolio](https://vandis.com/case-studies) - [Contract Vehicles](https://vandis.com/contract-vehicles) - Who We Are - [Who We Are](https://vandis.com/about-vandis) - [Careers](https://vandis.com/vandis-careers) © 2026 Vandis Inc., All Rights Reserved. [Terms of Use](https://vandis.com/terms-of-use)[Privacy Policy](https://vandis.com/privacy)[Event Policy](https://vandis.com/event-policy) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Vandis", "url" : "https://vandis.com/insights/author/vandis" }, "dateModified" : "2025-07-02T18:51:37.697Z", "datePublished" : "2020-05-18T04:00:00.000Z", "headline" : "Defending Against Credential Based Attacks by Protecting the Keys to the Front Door | Vandis", "image" : [ "https://vandis.com/hubfs/Imported_Blog_Media/maxim-zhgulev-5tmitjfhkic-unsplash-Jun-05-2025-06-58-59-5291-PM.jpg" ], "mainEntityOfPage" : { "@id" : "https://vandis.com/insights/defending-against-credential-based-attacks-by-protecting-the-keys-to-the-front-door", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://vandis.com/hubfs/Vandis-Full%20Logo%20Full%20Color-1.png" }, "name" : "Vandis Inc." } } ```