Introduction
Recorded Future Identity Intelligence enables security and IT teams to detect identity compromises.
Recorded Future automates the collection, analysis, and production of identity intelligence from a vast range of sources.
You can incorporate identity intelligence into automated workflows that regularly monitor for compromised credentials and take immediate action using Recorded Future Identity data and Microsoft Entra ID.
There are many ways organizations can utilize Recorded Future Identity Intelligence. The Azure Logic Apps in this Solution provided as examples and are a quick introduction to some of those ways.
These playbooks include several actions that can be coordinated, or used separately.
They include:
- Ingest novel identity exposures for specified domains
- Adding a compromised user to an Entra ID security group
- Confirming high risk Microsoft Entra ID users
- Looking up existing users and saving the compromised user data to a Log file
Getting Started
For more information, prerequisites, and an installation guide please go to Microsoft Sentinel GitHub repository.
Support
Please reach out to Recorded Future Support at support@recordedfuture.com for further queries or assistance needed during the installation process.