We are happy to announce that we have introduced Identity Response actions for Elements Identity Security.
Response is a vital aspect of any XDR solution to preventing significant impacts from cyberattacks. Therefore, Identity Response is a critical component of Elements Identity Security. Response actions provided by the Identity Response capability are designed to allow administrators to quickly minimize threats seamlessly through direct integration between Elements Cloud and your Entra ID instance.
Identity Response includes the following actions:
- End Current Session: Terminates the active session for a user.
- Reset Password: Forces a password change to secure the account.
- Block User Access: Restricts access for the user to prevent further malicious activity.
These actions can be used in various situations to contain a identity cyber threat.
Submit an Identity Response action
You can quickly and easily submit a response actions directly from the BCD saving you time during a crisis.
Identity Response actions can be viewed in the “Response” view, alongside endpoint responses.
Future plans
Identity Response will soon be available for organizations that have purchased XM for User to remediate risks highlighted by the exposure management tooling.
We are currently planning on implementing automatic identity response jobs during the first half of 2025.
If you have any feedback on the response jobs or would like to request additional Entra ID related actions, please use your Elements production login to create ideas for XDR in the Ideas section of the WithSecure Community
