SCIAT Identity Protection
Real-time detection of credential misuse, privilege escalation and lateral movement across on-premise Active Directory and cloud identity providers.
Identity threat detection and response for Active Directory and Entra ID.
SCIAT Identity Protection
at a Glance
Compromised credentials are now the most common route into enterprise networks, and an attacker operating with valid credentials is difficult to distinguish from a legitimate employee. SCIAT Identity Protection establishes behavioural baselines for every user and service account, detects anomalous authentication and privilege use in real time, and can enforce step-up verification or block access before an intrusion progresses. It also identifies the identity hygiene weaknesses that attackers exploit.
Key Capabilities
of SCIAT Identity Protection
Detection of Kerberoasting, pass-the-hash, golden ticket, credential stuffing and other identity-based attacks.
Step-up multi-factor verification or access denial applied automatically when authentication risk is elevated.
Continuous oversight of domain administrators, service accounts and other high-value identities.
Stale accounts, weak password policies, excessive privilege and risky delegation identified and prioritised.
On-premise Active Directory and cloud identity providers protected and reported through one console.
Identity signals feed SCIAT XDR and SIEM, strengthening correlation across endpoint and network activity.
Technical
Specifications
- Identity sources
- Active Directory, Microsoft Entra ID, Okta
- Enforcement
- Risk-based MFA, session termination, account suspension
- Deployment
- Lightweight sensor on domain controllers; API for cloud IdPs
- Framework mapping
- MITRE ATT&CK
- Licensing
- Annual subscription, by identity
