Penetration test of the office IT in the LEAG Group

Lausitz Energie Bergbau AG is part of the LEAG Group and runs three opencast mines in the Lausitz region.

secunet carried out a complex analysis of the IT environment within the LEAG Group's office IT. Part of the analysis involved checking typical systems (workstations and servers). On the other hand, the attack of a malware was simulated, which attempted to gain administrative rights in the internally used domain based on a normal user.

In addition to the directly usable knowledge about vulnerabilities in the investigated systems, this analysis also checked whether the client's SOC service provider was able to detect the simulated incident.

The work packages included

•   Analysis of workstations
•   Analysis of application servers
•   Analysis of Linux servers
•   Malware breach analysis