1. A computer-implemented method for identifying security risks, comprising: using at least one server connected to a computer network to perform the following actions: retrieving a plurality of account credentials of a plurality of accounts from a storage of each member of a first group of machines in said computer network, said storage comprising at least one member of a group consisting of a registry, a Security Account Manager (SAM), a Local Security Authority Subsystem Service (LSASS), a memory, a persistent storage and a non-persistent storage; collecting a plurality of account access rights, each one of said plurality of account access rights grants to one of said plurality of accounts an access to at least one member of a second group machines in said network; and identifying at least one of a presence and absence of a plurality of security risks to at least one member of said second group by a correlation between at least one of said plurality of account credentials and at least one of said plurality of account access right; wherein said at least one account credential and said at least one account access right is of the same account from said plurality of accounts.