A IAM identity threat protection engine that:

  • Detects credential threats
  • Uses detection rules for:
    • Unusual geolocations
    • Access from multiple locations concurrently
    • access from IP with bad reputation
    • Suspicious web based activity
    • Use of stale user account
  • Uses CrowdStrike Falcon