Abnormal now continuously analyzes login history using newly identified indicators of compromise (IOCs). When a historical login matches emerging IOCs, Abnormal automatically creates a new ATO case or updates existing case confidence levels and provides enriched threat context to help accelerate investigation.

This update to ATO leverages signals across the Abnormal customer base to strengthen case accuracy over time, which helps security teams detect and respond to threats with greater confidence.

Now Available.