Blog

Recent
Cloud Detection & Response

Have I Been Pwned? Detecting Entra ID Persistence Before Your SIEM Even Existed

Most detection content catches persistence techniques as they happen. But what if the attacker was already there before you connected your logs? CloudTwin™ analyzes Entra ID configuration state — not just log events — to answer the question every SOC team should be asking: "Have I been pwned?"
Petr Zuzanov
Petr Zuzanov
May 14
12
min
All posts
Or Shoshani
Or Shoshani
Nov 14, 2023
3
min
Maor Idan
Maor Idan
Nov 13, 2023
3
min

What's new