https://store-images.s-microsoft.com/image/apps.64125.939fae7c-4604-49e0-86b0-8aeadd7e95be.6b00f3e6-e79e-4520-980b-95ee66e8737a.67948475-3913-44b7-92ee-11b041454cbe

Recorded Future Identity Solution

Recorded Future

(127 oceny)

Recorded Future Identity Solution

Recorded Future

(127 oceny)

Arm yourself with real-time information about identity compromises and take action in Microsoft AD

Note: There may be known issues pertaining to this Solution, please refer to them before installing.


Recorded Future Identity Intelligence enables security and IT teams to detect identity compromises, for both employees and customers. To do this, Recorded Future automates the collection, analysis, and production of identity intelligence from a vast range of sources. Organizations can incorporate identity intelligence into automated workflows that regularly monitor for compromised credentials and take immediate action with applications such as Azure Active Directory and Microsoft Sentinel. There are many ways organizations can utilize Recorded Future Identity Intelligence; the playbooks in this Solution are just a quick introduction to some of those ways. In particular, these playbooks include several actions that can be coordinated, or used separately. They include:

  • searches for compromised workforce or external customer users
  • looking up existing users and saving the compromised user data to a Log file
  • confirming high risk Azure Active Directory (AAD) users
  • adding a compromised user to an AAD security group
For installation instructions, see the Documentation for this Solution.


The playbooks have internal dependencies where you have to install:

  • RFI-add-AAD-security-group-user
  • RFI-confirm-AAD-risky-user
  • RFI-lookup-and-save-user
Before:
  • RFI-search-workforce-user
  • RFI-search-external-user.
Playbooks: 5