Identity Intelligence Trial FAQ

Which team could benefit from a trial of Recorded Future’s Identity Intelligence Module?

  • Recorded Future’s Identity Intelligence module provides real-time detection of exfiltrated or leaked employee and customer credentials. Security and fraud teams at organizations with a risk of account takeover and email compromise use it to automate taking action against compromised identities of employees, customers, partners, and third parties.

What do I get access to during the trial?

  • Full access to relevant credentials as indexed from:
    1. Direct engagement with threat actors
    2. Published Breaches 
    3. Malware logs
    4. Compromised host metadata
    5. Queries for unique email addresses and domains

Why am I seeing a banner to start a new trial? 

  • The Identity Intelligence module comprises two license types: Employee Credentials and User Credentials. Learn more about the two license types here.

What is the difference between Identity Intelligence and the leaked credentials on Brand Intelligence?

  • Identity Intelligence provides in-depth information on compromised identities, including detailed malware logs and full context on credentials, whereas Brand Intelligence is limited to employee emails and password hints.

    Identity Intelligence also enables organizations to put in place checks for customer and third-party identities to provide the most comprehensive security possible with purchase of the relevant product.

How do I add more domains to monitor during my trial?

  • Contact our support team at support@recordedfuture.com to let us know which domains to curate for your trial. You can expect to see additional detections populate in your Identity dashboard within one business day.

Can anyone on my team start a trial?

  • Yes, any Recorded Future user in your organization can start a trial by clicking on the banner from the Identity Intelligence landing page here.

    If you would like to invite a colleague in your organization who isn’t a Recorded Future user to try Identity Intelligence, please contact our support team at support@recordedfuture.com.

Will I be charged once my trial ends?

  • There are no commitments or purchase requirements during or after your trial. Once your trial ends, we’d love to hear your feedback on your experience,  but it's at your discretion if and when you want to continue with our sales team to purchase the Intelligence Intelligence Module. 

What makes malware logs different from credential data dumps found on the dark web?

  • Malware logs are a high-fidelity source of live compromised credentials from malware categorized as infostealers, which generally provide:
    1. High-fidelity intelligence compared to information that requires checking validity against internal or customer identity databases
    2. Unaltered, new compromises instead of recycled credentials filtered by cybercriminals
    3. Intelligence collected in real time rather than breaches that were potentially collected months ago

How is the information for Identity Intelligence obtained?

  • We have proprietary sources and methods for obtaining data in compliance with applicable law. We do NOT “pre-order” data and will NEVER direct a threat actor to illegally obtain data.

How is spoofed data or source poisoning handled?

  • We closely monitor for spoofed logs by investigating exposures and actively devise new proprietary methods to flag fake data.

Does Identity Intelligence handle privileged accounts?

  • Yes, for privileged accounts that are email based and considered higher priority with higher risk, Identity Intelligence provides queries for specific email addresses.

How are salted hashes password leaks handled?

  • Identity Intelligence provides a few different hashes, such as SHA1, MD5, SHA256, NTLM, so you can choose what works best for comparison.

Can I access Identity Intelligence data through an integration or via API?

  • Yes, integrations are available for security tools, such as Swimlane, XSOAR, Phantom, and Microsoft Azure Sentinel. You may also contact Recorded Future support to discuss API access for any custom integration needs.
This content is confidential. Do not distribute or download content in a manner that violates your Recorded Future license agreement. Sharing this content outside of licensed Recorded Future users constitutes a breach of the terms and/or agreement and shall be considered a breach by your organization.
Was this article helpful?
3 out of 5 found this helpful

Articles in this section