Detect, Defend, Disrupt (ITDR)
Combined Session
Thursday, November 06, 2025 11:30—12:30
Location: Liberty 2
Log in to download presentations
Thursday, November 06, 2025 11:30—12:30
Location: Liberty 2
In today's threat landscape, identity systems are prime targets for cyberattacks. A compromised identity infrastructure can lead to widespread disruption, data loss, and significant financial damage. This session explores the critical concept of identity resilience – the ability to rapidly recover and restore identity services following a cyber event.
We will explore the challenges of protecting both on-premises Active Directory and cloud-based Entra ID environments, and discuss strategies for ensuring business continuity. Learn how to implement immutable backups, leverage clean room recovery techniques, and establish unified workflows for streamlined recovery. We will also cover the importance of granular object-level restoration and secure, isolated recovery environments to minimize downtime and mitigate the risk of reinfection. This session will provide actionable insights for building a robust identity resilience strategy, empowering organizations to withstand and recover from even the most sophisticated attacks.
Identities don’t exist in isolation, they interact with systems, devices, cloud environments, and a growing number of non-human accounts. Yet too often, identity governance, security operations, and asset management are managed in silos, creating blind spots and unnecessary risk.
This session introduces the 'Magic Triangle' of identity security, a concept that aligns identity, security operations, and asset visibility. Attendees will see how fragmented visibility across users, machines, and technologies leads to exposures like stale accounts, SSO bypasses, and misconfigured access, setting the stage for many of today’s high-profile breaches.
Amir will share a data-driven approach to unify visibility and governance, showing how modern IAM teams can:
- Detect toxic access combinations
- Govern both human and non-human identities
- Automate lifecycle processes at scale
- Improve collaboration between IAM, IT, and security
If identity is the battleground of modern breaches, context is the key to winning.
This panel explores advanced tactics for detecting compromised credentials, account takeovers, lateral movement, and privilege escalation, using identity as a critical source of telemetry.
Discover how organizations are proactively defending against today’s most pervasive identity threats.
