ATO Protection now ingests posture events like privilege changes and policy edits to surface attacker persistence tactics and expand investigation visibility.
Subscribe to our newsletter to receive updates on the latest attacks and new trends in the email threat landscape.
Email Account Takeover Protection can now ingest posture events*—specifically high-impact changes to user privileges and when a user changed mail tenant conditional access policies. These changes can indicate an attacker attempting to establish persistence and expand the attack surface area. Ingesting these signals and aggregating them in Account Takeover Cases further aids investigation and gives security teams greater visibility into the downstream impact of account compromise.
*Requires Email Security Posture Management to use.