Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Darktrace / IDENTITY is an advanced identity threat defense solution powered by AI, designed to merge proactive risk management with real-time detection, thorough investigation, and autonomous response throughout various IT environments. It seamlessly integrates with single sign-on systems and Active Directory, ensuring comprehensive visibility into user activities by tracking access and behaviors after authentication across cloud, SaaS, hybrid, and on-premises setups. Utilizing Self-Learning AI, the system performs millions of computations based on real-time data to establish baseline behaviors for users, devices, applications, service accounts, and other identities, allowing it to pinpoint subtle anomalies that could signal issues like account takeovers, credential theft, session-token misuse, insider threats, lateral movement, or data breaches. Additionally, Peer Group Analysis emphasizes behaviors that stand out among similar users, while Credential Theft Monitoring leverages a combination of human insight and the rapid processing capabilities of AI. This multi-faceted approach enhances the overall security posture by addressing potential threats before they can escalate into serious breaches.
Description
Falcon Identity Threat Detection provides a comprehensive view of all Service and Privileged accounts across both your network and cloud environments, offering detailed credential profiles and identifying weak authentication measures across every domain. It allows for a thorough analysis of your organization’s domains to uncover potential vulnerabilities linked to outdated credentials or weak password practices, while also revealing all service connections and insecure authentication protocols in use. This solution continuously monitors both on-premises and cloud-based domain controllers through API integration, capturing all authentication traffic in real time. By establishing a behavioral baseline for all entities, it can identify unusual lateral movements, Golden Ticket attacks, Mimikatz traffic patterns, and other related security threats. Additionally, it aids in recognizing escalation of privilege and suspicious Service Account activities. With the capability to view live authentication traffic, Falcon Identity Threat Detection significantly accelerates the detection process, making it easier to identify and address incidents as they arise, thus enhancing overall security posture. Ultimately, this proactive monitoring ensures that organizations remain vigilant against potential identity-related threats.
API Access
Has API
API Access
Has API
Integrations
Active Directory
Axonius
CardinalOps
CrowdStrike Falcon
Darktrace
Dropzone AI
KernelCare Enterprise
Integrations
Active Directory
Axonius
CardinalOps
CrowdStrike Falcon
Darktrace
Dropzone AI
KernelCare Enterprise
Pricing Details
No price information available.
Free Trial
Free Version
Pricing Details
No price information available.
Free Trial
Free Version
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Vendor Details
Company Name
Darktrace
Founded
2013
Country
United Kingdom
Website
www.darktrace.com/products/identity
Vendor Details
Company Name
CrowdStrike
Founded
2011
Country
United States
Website
www.crowdstrike.com/products/identity-protection/falcon-identity-threat-detection/