PAWlyzer — Tier0 Exposure Dashboard

Threats & Exposure?

!Incidents & Risks

—

Incidents on device / user in last 30 days

— High — Medium — Low

%Non-Admin URL Traffic

—

—of browsing to non-privileged interfaces from devices with privileged access

⚑Endpoint Attack Surface

—

Vulnerabilities

—

Exposed Tokens

—

Non-Microsoft Apps installed

—

⚙Lateral Movement to Admin Device

—

Intune Admins—

Device Admins—

Local Device Admins—

SPs · API Permission—

MICROSOFT 365

Tier0 Assets · Users

—

Tier0 Users

OVERALL RISK · —

Admin Devices Seen —

—

Entra ID-joined

—

Registered

—

Unknown · Sign-ins

← Exposure

—/10

Threats · Lateral Movement

Hygiene

—/10

Stale users · unseen devices

Blast Radius →

—/10

Blast radius if compromised

Permissions & Activities?

⬡Tier0 Permissions by Service

↗Active users to internal/external tenants

—

Total active users (30d)

—

Cross-Tenant users

—

External Tenants

✎Privileged Activities

—

CREATE

—

WRITE

—

DELETE