Capability
Identity Threat Detection
Identity Protection risk signals (sign-in risk, user risk) flowing into the SOC, risk-based Conditional Access in enforce mode, and identity incidents tracked alongside endpoint and network signals. The identity layer of the modern SOC.
An organisational capability that the journey relies on.