#itdr — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #itdr, aggregated by home.social.
-
New from Auth Sentry: AI Analysis.
When a complex investigation comes in with 100s of alerts, & multiple rules firing, auth events across countries, the first job is just reading. Building the narrative before you can act.Our AI Analysis does it automatically. Plain-English report & disposition recommendation with visible reasoning, next steps scoped to your active integrations.
Available on Predict now - try free for 7 days
gethumming.io/how-it-works
-
Attacker hand-off times have dropped from hours to seconds. Dwell times are rising. Attackers are moving faster when active, while staying hidden longer during persistence.
They're not racing your detection window. They're operating comfortably inside it.
Detection that waits for a breach event is already behind. The window is during persistence in the behavioral signals that appear before the objective is reached.
That's where Auth Sentry operates: gethumming.io
#ITDR #CyberSecurity -
Identity debt is the accumulated cost of decisions that made sense at the time.
Abandoned OAuth tokens. Service accounts from old projects.
Over-permission fixes that would've taken time no one had to fix...Pragmatic then. Compounding now.
Like code debt, you can't prioritize what you can't see.Auth Sentry Monitor inventories human & non-human identities, blast radius analysis, & relationship mapping FREE
gethumming.io/monitor
-
There is an argument to be made that XDR, despite gathering ever-more telemetry, can't be the silver-bullet detection/response solution. There's just too much domain-specific knowledge required to sufficiently detect and respond to the plethora of threats.
Thus, the rise of domain-specific detect/response tools such as cloud (CDR), Identity (ITDR), and now application or ADR.
Miggo Security raised $7.5M seed funding for an ADR system that helps organizations address attacks with in-application context into runtime transactions and behaviors.
-
𝐄𝐱𝐩𝐥𝐨𝐫𝐢𝐧𝐠 𝐭𝐡𝐞 𝐧𝐞𝐰 𝐈𝐓𝐃𝐑 𝐞𝐱𝐩𝐞𝐫𝐢𝐞𝐧𝐜𝐞 𝐰𝐢𝐭𝐡𝐢𝐧 𝐌𝐢𝐜𝐫𝐨𝐬𝐨𝐟𝐭 𝐃𝐞𝐟𝐞𝐧𝐝𝐞𝐫
The new ITDR dashboard is designed to provide SOC professionals with a single, prioritized view of Identity-specific security information and recommendations.
For more information, see:
#itdr #defender #defenderxdr #identity #security #microsoft #microsoftsecurity #mdi #entraid #azuread #Identitythreatdetection #cloud #cloudsecurity #soc #cloudnative
-
𝗦𝗶𝗺𝗽𝗹𝗶𝗳𝗶𝗲𝗱 𝗱𝗲𝗽𝗹𝗼𝘆𝗺𝗲𝗻𝘁 𝘄𝗶𝘁𝗵 𝗗𝗲𝗳𝗲𝗻𝗱𝗲𝗿 𝗳𝗼𝗿 𝗜𝗱𝗲𝗻𝘁𝗶𝘁𝘆
"Microsoft Defender for Identity is an essential part of a modern security practice, helping your organization protect against, and respond to, identity-based threats. In this blog we will show you the simple steps for deploying Microsoft Defender for Identity within your environment."
#defenderforidentity #mdi #microsoft #microsoftsecurity #defender #adfs #domaincontroller #activedirectory #itdr #azure #adfs #adcs #deployment
-
It's taken me almost a year to write (and edit) my rant about categories and acronyms in cybersecurity. Which acronyms or categories annoy you the most? Security teams don't need more tools, they need efficient ways to mitigate risk and respond quickly to threats or attacks - especially now to keep up with faster development cycles.
https://www.techtarget.com/searchsecurity/opinion/Cloud-native-app-security-Ignore-acronyms-solve-problems
#cloudsecurity #applicationsecurity #appsec #cspm #sast #dast #iast #sca #sbom #ciem #asoc #dspm #aspm #cnapp #cdr #mdr #itdr #ndr #mdr #xdr #edr #cnapp #wapp #devsecops #cybersecurity #infosec #ciso #cso -
𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝗚𝗿𝗮𝗽𝗵 𝗔𝗰𝘁𝗶𝘃𝗶𝘁𝘆 𝗟𝗼𝗴 𝗶𝘀 𝗡𝗼𝘄 𝗔𝘃𝗮𝗶𝗹𝗮𝗯𝗹𝗲 𝗶𝗻 𝗣𝘂𝗯𝗹𝗶𝗰 𝗣𝗿𝗲𝘃𝗶𝗲𝘄
With Microsoft Graph Activity Logs, you can now investigate the complete picture of activity in your tenant – from token request in SignIn logs, to API request activity (reads, writes, and deletes) in Microsoft Graph Activity Logs, to ultimate resource changes in Audit logs.
#microsoft #entra #entraid #azuread #graph #microsoftgraph #log #idp #identity #azure #API #soc #itdr #security #cybersecurity #siem #soc #monitoring #loganalytics #sentinel #hunting #cyberthreat #identity #identityprovider #microsoftsecurity
-
#ITDR is quickly gaining ground because #identities are at the forefront of the attack chain.
@SpecterOps just raised $8.5M more #funding for their ITDR/red team tools
https://www.axios.com/2023/07/11/cyber-startup-specterops-8m-ballistic-ventures
