Identity Threat Detection and Response Integration Overview

This document is a technical report detailing the partnership between Microsoft and Acalvio to enhance identity protection through advanced deception techniques. It outlines the significance of Zero Trust architecture, emphasizing that identity protection is foundational to this approach. The report explains how identity threats account for a significant percentage of cyberattacks and describes the innovative use of honey accounts and honeytokens as effective tools for detecting identity threats. These deception techniques are designed to lure attackers away from real identities and provide reliable indicators of identity compromise. The integration of Acalvio's honeytoken solution with Microsoft Defender for Identity is highlighted, showcasing its capabilities for enterprise-scale deployment. The report also discusses the ease of use and operational efficiency of the integrated solution, which requires no additional agents and leverages existing Microsoft Defender and Sentinel infrastructures. Overall, the document presents a comprehensive view of the new layer of identity threat detection and response offered through this collaboration.