July 2022

Adversaries leverage open-source credential dumping tools, such as Mimikatz and LaZagne, to obtain credentials from various sources (databases, memory, web browsers, etc.). These tools help attackers discover credentials in the form of a hash or a clea…

The threat landscape has rapidly shifted with the transition into hybrid and fully remote working and cloud migration. This change has effectively removed the network edge and driven companies to shift their security posture to focus on identities vers…

On-premises and Azure Active Directory environments are primary targets for attackers. However, protecting these environments is a daunting task, made more difficult because Active Directory administrators must balance operational requirements with res…

Organizations have traditionally looked at identity protection to authenticate and authorize a user’s access to the network and its resources. While useful, it doesn’t provide the necessary visibility into identity security, including crede…

Attackers have repeatedly demonstrated they can evade an organization’s conventional defenses. To remain effective, a modern Active Defense requires additional capabilities that fill the gaps not covered by traditional security controls. Deceptio…

Attackers have proven they can evade the perimeter to establish a beachhead inside a network from which they can laterally move while remaining undetected, often for months or years Security solutions deployed inside the network, such as IDPS, segme…

Granting the right user secure access to a system, resource, application, or network goes beyond confirming the user’s identity based on their authorization and authentication. It must also include accurately making sure that the tools they use s…