Introducing Microsoft Entra Integration, Analyst Role, and Enhanced ATO Investigation
🌟 New Feature Alert 🌟
We’ve rolled out major enhancements to Verosint, making it easier to integrate with Microsoft Entra, streamline threat response actions with a new Analyst role, and investigate Account Takeover (ATO) threats with greater context.
What’s New?
✅ Microsoft Entra Integration – With this integration, you can:
- Stream Microsoft Entra events into Verosint for proactive threat detection and response
- Enrich user profiles with key metadata for better visibility and analysis
- Take action directly from Verosint by revoking sessions or suspending accounts in real time
Set up Threat Response for Microsoft Entra on the Verosint Settings page
✅ New Analyst Role – A middle ground between Read-Only and Admins, Analysts have the complete toolkit for responding to and preventing threats...
- Trigger Threat Responses (e.g., Revoke Sessions, Suspend Account)
- Create Lists and Workflows
- Evaluate Rules
... without access to admin-level settings like billing, integrations, or user management.
✅ Enhanced ATO Investigation – From the ATO card, you can now use the See More button to pull up the Event Details panel for the exact event where the ATO occurred, giving you deeper context before diving into Account Intel.
See more event details for an Account Takeover threat so you have all the context you need
Why Does This Matter?
🔹 Stronger security automation with Microsoft Entra’s integration.
🔹 More granular role management with Analyst permissions tailored for security teams.
🔹 Faster, more informed investigations with direct access to ATO event details.
🚀 Start using these features today!