Identity threat coverage targeting compromised accounts and insider threats
The Identity Threat module provides superior coverage for stealthy identity threat vectors, including compromised accounts and insider threats. The module is available as an add-on and includes the following UI features.
Automated and customizable Asset Role classification based on constant analysis of the users and host in your network. You can edit and manage the User Asset Roles and Host Asset Roles to meet the needs of your organization.
The Behavioral Analytics tab in the Issue Panel view that displays background information for quicker triaging and investigation. This enables you to analyze the deviation that generated the issue against the backdrop of baseline behavior.
Risk Management dashboard for reviewing the risk posture of the organization and enabling faster decision making. The dashboard contains a number of Metrics widgets that present statistical risk information for your organization.
User Risk View and Host Risk View which provide additional information about the asset, including score trend timeline, notable events, peer comparison, and additional asset-associated issues and insights for easy uncovering of hidden threats.
ITDR Issues and Insights link for quickly reviewing all ITDR-related issues, including INFO, at a glance, with filtering, sorting, and other options. The link is under → → .
Weak Password widget for identifying the users in your organization who are likely to be targeted because they have a weak or compromised password. To see the widget, go to → → , click the number of unified human identities. In the All Unified Human Identities screen, click the On-premises Identities tab and then Human Identities.