Patent ID: 9386044
Filing Date: 2016-07-05
CPC Classification: G06F,H04L

Claim Text:
1. A computer-implemented method for identifying security risks, comprising: using at least one server connected to a computer network to perform the following actions: retrieving a plurality of account credentials of a plurality of accounts from a storage of each member of a first group of machines in said computer network, said storage comprising at least one member of a group consisting of a registry, a Security Account Manager (SAM), a Local Security Authority Subsystem Service (LSASS), a memory, a persistent storage and a non-persistent storage; collecting a plurality of account access rights, each one of said plurality of account access rights grants to one of said plurality of accounts an access to at least one member of a second group of machines in said network; generating a mapping dataset which maps said plurality of account credentials to machines in said first group; and identifying automatically at least one of a presence and absence of at least one security risk and which of said plurality of account credentials causes said at least one security risk to at least one member of said second group by an analysis of said mapping database and a correlation between at least one collected account credentials from said plurality of account credentials of a certain account of said plurality of accounts and at least one of said plurality of account access rights retrieved for said certain account; wherein said at least one retrieved account credential and said at least one account access right is of the same account from said plurality of accounts.