Secures Active Directory and cloud directory environments against credential theft, delegation abuse, weak trusts, privilege escalation, and persistence.