Identity Security, IT Atlas

Overview

Identity is now the primary attack surface. Attacks target credentials, session tokens, MFA registration, application consent and directory privilege rather than network perimeters.

Identity security therefore combines strong authentication, privileged access control, directory hardening, and detection focused on identity telemetry such as sign in logs, audit logs and directory changes.

Security considerations

Monitor MFA registration changes, new federation trusts, consent grants and privileged role activation.
Harden the directory itself: no standing privilege, tiered administration, and protected break glass accounts.

Related topics

Microsoft Entra ID

Microsoft's cloud identity and access management service, the identity control plane for Microsoft 365, Azure and thousands of federated applications.

Active Directory

Microsoft's on premises directory service, providing authentication, authorisation, policy and object management for Windows environments.

Multi Factor Authentication

Requiring two or more independent factors, something you know, have or are, before granting access.

Privileged Access Management

Controlling, brokering, recording and time limiting administrative access to the systems that can change everything else.

Threat Hunting

Proactively searching telemetry for adversary activity that automated detections have missed, driven by hypotheses rather than alerts.