Detect and alert on unauthorized Active Directory queries
Hide sensitive or critical Active Directory objects in query results
Lead attackers to decoys with deceptive query results
Requires no modifications to production Active Directory controllers