itdr

This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can be mitigated or detected.

Collection of Microsoft Identity Threat Detection and Response resources.

Authomize open solutions for partners and customers

Mantissa Log is an open-source and cost-transparent engine that uses a natural language interface to "Ask Questions. Detect Threats. Trace Performance. Automate Responses."

ITDR (Identity Threat Detection and Response) platform with ML-powered anomaly detection, UEBA, risk scoring, and role mining

Identity Security Graph — unify humans, service accounts, keys and AI agents in one graph; detect excessive privilege and anomalous behavior (Apache-2.0)

Open-source incident-response governance for pre-authorized ransomware containment.

Identity Threat Detection and Response (ITDR) platform built using Python, FastAPI, Apache Kafka, Docker, and Neo4j.

Open-source identity containment validation. Prove revoked credentials and sessions actually lose access within an SLO.

Provider-agnostic Identity Threat Detection & Response (ITDR) platform with real-time detection, automated multi-provider containment, a fail-open SDK, and tamper-evident cryptographic audit trails.

Closed-loop identity threat detection and response: CrowdStrike Falcon Identity Protection driving automated governance actions in Saviynt IGA

Valence Security — independent third-party profile of a public API surface, by API Evangelist. Valence Security is the leader in SaaS and AI Security, built for the agentic era. The platform provides SaaS security posture management (SSPM), AI security posture management (AI-SPM), identity threat detection and response (ITDR), and risk remediation

Wing Security — independent third-party profile of a public API surface, by API Evangelist. Wing Security is an AI security platform providing automated discovery, risk assessment, and governance of AI agents, SaaS applications, and app-to-app integrations. The platform delivers SaaS Security Posture Management (SSPM), Identity Threat Detection and

Attivo Networks (SentinelOne) — independent third-party profile of a public API surface, by API Evangelist. Attivo Networks was a pioneer in identity threat detection and response (ITDR), cyber deception, and Active Directory attack protection. SentinelOne acquired Attivo Networks in 2022 and folded its technology into SentinelOne Singularity Ident

Astrix — independent third-party profile of a public API surface, by API Evangelist. Astrix Security is a non-human identity (NHI) and AI agent security platform. It gives enterprises a real-time inventory of every AI agent, MCP server, service account, OAuth app, API key, SSH key and IAM role across their environment, then detects excessive privil