Identity Threat Detection and Response powered by ProSOC MDR and Active Defense XDR
Proficio, a leading Managed Detection and Response (MDR) service provider, announced the launch of ProSOC Identity Threat Detection and Response. This new service is the industry’s only vendor agnostic Open XDR solution that supports Identity Threat Detection and Response and works with existing security tools without proprietary agents or sensors.
Identity-based attacks are one of the top cybersecurity threats facing organizations today. Attackers are increasingly attempting to steal credentials, escalate privileges, and move laterally across an organization’s infrastructure. Proficio’s ProSOC Identity Threat Detection and Response service leverages advanced technology combined with human-led investigations to detect threats to an organization’s Identity and Access Management (IAM) infrastructure. When a high-fidelity threat is detected, Proficio’s automated response solution, Active Defense, can quickly suspend or reset a user account for one or more applications.
“The fact that identity compromises are present in most ransomware and supply chain attacks is a major concern for our clients,” said Brad Taylor, CEO, Proficio. “Traditional approaches to security monitoring with manual incident response are often too slow to react to these attacks and compromises. Our new ProSOC Identity Threat Detection and Response service addresses identity-based threats more effectively than any other alternative, works with your existing security tools, and does not require changes or additions of agents or sensors.”
ProSOC Identity Threat Detection and Response Advantages:
Increased Visibility to Identity Threats: Identity threat use cases, cross-correlation rules, machine learning models, telemetry from security devices, and threat intelligence data are combined to detect identity-based attacks and compromises more accurately. Clients receive prioritized alerts aligned with the MITRE ATT&CK framework and can view identity threat activity in Proficio’s ProView™ portal.
Fast Effective Response: Active Defense supports both automated and semi-automated functions, allowing incident responders to perform a double validation of a threat before initiating an account suspension through a single click in Proficio’s ServiceNow portal.
Reduced Risk of Ransomware: ProSOC Identity Threat Detection and Response service reduces the risk of ransomware attackers stealing privileged credentials to propagate ransomware across business applications and cloud instances.
Vendor Agnostic: Enhances existing vendor tool capabilities to deliver threat detection and response across all platforms and telemetry without adding sensors or agents.