Truth in IT
    • Sign In
    • Register
        • Videos
        • Channels
        • Pages
        • Galleries
        • News
        • Events
        • All
Truth in IT Truth in IT
  • Data Management ▼
    • Converged Infrastructure
    • DevOps
    • Networking
    • Storage
    • Virtualization
  • Cybersecurity ▼
    • Application Security
    • Backup & Recovery
    • Data Security
    • Identity & Access Management (IAM)
    • Zero Trust
    • Compliance & GRC
    • Endpoint Security
  • Cloud ▼
    • Hybrid Cloud
    • Private Cloud
    • Public Cloud
  • Webinar Library
  • TiPs
  • DRAW

Identity Threat Detection & Response with Cohesity DSP

Cohesity
05/26/2026
0 (0%)
Share
  • Comments
  • Download
  • Transcript
Report Like Favorite
  • Share/Embed
  • Email
Link
Embed

Transcript


your identity and access management tools are tier zero assets. If compromised, all forms of authorization and access, it just grinds to a halt and identity becomes untrusted. In this video, I'll show you how some Paris Directory Services Protector, DSP, continuously assesses AD risks, detects dangerous changes in real-time, and can roll them back in seconds, all as part of Qoocity's identity resilience. DSP continuously evaluates Active Directory and Enter ID for real attack paths, not just configuration drift. This tells security teams what's wrong and not just what's changed in Active Directory and Enter ID right now. Over-permissioned objects, stale privileges, and misconfigurations are some of the things attackers exploit. This is how you reduce the attack surface before an identity attack happens. This is a classic attacker technique, establishing privilege persistence. Now, if we take a second to add a user to a high-privileged security group, we're going to be able to trigger an alert within the DSP console. DSP detects this in near real-time, prioritizing it by risk, and shows exactly what's changed and why it matters. This is the critical difference between visibility and response. With one action, we can automatically revert the directory to a trusted state and eliminate attacker persistence, no scripts, no manual cleanup. We can also look at the comparison before the changes were made and then after by clicking on Compare. Here you can see those changes before and after. This dramatically reduces the time to containment during an identity incident. We'll know what changes were made, and then we can undo those changes. This is the critical difference between visibility and response. With one action, we can automatically revert the directory to a trusted state and eliminate attacker persistence, no scripts, no manual cleanup. This dramatically reduces time to containment during an identity incident. Every indicator, alert, and remediation is fully documented. This gives security, auditors, and incident response teams a defensible record of what happened and how it was resolved. In short, today's demo showed how Cohesity Identity Resilience secures your identity environment as a tier zero asset. SEMPERA's Directory Services Protector reduces identity attack surface, detects identity attacks as they happen, and enables rapid containment, proactively securing identity as part of Cohesity's cyber resilience strategy. Thank you, have a good day.

TL;DR

  • Cohesity Directory Services Protector (DSP) continuously monitors Active Directory and Entra ID for real attack paths, not just configuration changes, identifying exploitable weaknesses before attacks occur.
  • The solution detects identity threats in near real-time and enables one-click remediation to revert directories to trusted states, eliminating attacker persistence without manual cleanup or scripting.
  • DSP provides comprehensive audit documentation of all indicators, alerts, and remediation actions, creating defensible records for security teams, auditors, and incident response personnel.

Summary

This demonstration showcases Cohesity's Directory Services Protector (DSP), an identity threat detection and response (ITDR) solution designed to secure Active Directory and Entra ID as tier zero assets. The video illustrates how DSP continuously evaluates identity infrastructure for real attack paths rather than simple configuration drift, identifying over-permissioned objects, stale privileges, and misconfigurations that attackers commonly exploit. The demonstration walks through a simulated privilege persistence attack where an unauthorized user is added to a high-privileged security group, showing how DSP detects the change in near real-time, prioritizes it by risk, and enables one-click remediation to revert the directory to a trusted state. The solution provides full audit documentation of every indicator, alert, and remediation action, giving security teams, auditors, and incident response personnel a defensible record of identity incidents and their resolution. Cohesity positions this capability as part of their broader Identity Resilience and cyber resilience strategy, emphasizing rapid containment and proactive security for identity environments.

Chapters

0:00 - Identity as Tier Zero Assets
0:39 - Continuous Attack Path Evaluation
1:08 - Detecting Privilege Persistence Attacks
2:07 - One-Click Remediation and Audit Documentation

Key Quotes

0:10 "... your identity and access management tools are tier zero assets. If compromised, all forms of authorization and access, it just grinds to a halt and identity becomes untrusted."
0:43 "DSP continuously evaluates Active Directory and Enter ID for real attack paths, not just configuration drift. This tells security teams what's wrong and not just what's changed in Active Directory and Enter ID right now."
2:07 "This is the critical difference between visibility and response. With one action, we can automatically revert the directory to a trusted state and eliminate attacker persistence, no scripts, no manual cleanup."

Categories:
  • » Webinar Library » Cohesity
  • » Data Protection
Channels:
News:
Events:
Tags:
  • Identity & Access
  • Threat Intelligence
  • Security Operations
  • Demo
  • Technical Deep Dive
  • Identity Threat Detection and Response
  • ITDR
  • Active Directory Security
  • Entra ID Protection
  • Privilege Persistence Attacks
  • Attack Path Analysis
  • Real-time Threat Detection
Show more Show less

Browse videos

  • Related
  • Featured
  • By date
  • Most viewed
  • Top rated
  •  

              Video's comments: Identity Threat Detection & Response with Cohesity DSP

              XStreaminars (watch here)

              • Oct
                28

                EnvZero: Near-Zero Time to Resolution--Live Agentic Remediation for Failed and Drifted Infrastructure

                10/28/202601:00 PM ET
                More events

                Industry Events (Sponsor Hosted)

                • Oct
                  13

                  Transitioning from CJIS to FERPA: Essential Audit Evidence for Compliance

                  10/13/202601:00 PM ET
                  • Oct
                    15

                    Risk in Real Time Demo Series: Virtual Patching: Protection at the Speed of Exploitation

                    10/15/202611:00 AM ET
                    • Oct
                      20

                      Harnessing Data Governance for AI with Cyera and Snowflake

                      10/20/202611:00 AM ET
                      • Oct
                        27

                        Maximize Security, Value, and Returns on Your Microsoft Investment

                        10/27/202611:00 AM ET
                        • Oct
                          27

                          The HUMAN Experience: Real-Time Insights into Page Intelligence

                          10/27/202601:00 PM ET
                          More events

                          Upcoming Webinar Calendar

                          • 10/13/2026
                            01:00 PM
                            10/13/2026
                            Transitioning from CJIS to FERPA: Essential Audit Evidence for Compliance
                            https://www.truthinit.com/index.php/channel/2159/transitioning-from-cjis-to-ferpa-essential-audit-evidence-for-compliance/
                          • 10/15/2026
                            11:00 AM
                            10/15/2026
                            Risk in Real Time Demo Series: Virtual Patching: Protection at the Speed of Exploitation
                            https://www.truthinit.com/index.php/channel/1372/risk-in-real-time-demo-series-the-autonomous-era-orchestrating-a-resilient-enterprise/
                          • 10/20/2026
                            11:00 AM
                            10/20/2026
                            Harnessing Data Governance for AI with Cyera and Snowflake
                            https://www.truthinit.com/index.php/channel/2137/harnessing-data-governance-for-ai-with-cyera-and-snowflake/
                          • 10/27/2026
                            11:00 AM
                            10/27/2026
                            Maximize Security, Value, and Returns on Your Microsoft Investment
                            https://www.truthinit.com/index.php/channel/2178/maximize-security-value-and-returns-on-your-microsoft-investment/
                          • 10/27/2026
                            01:00 PM
                            10/27/2026
                            The HUMAN Experience: Real-Time Insights into Page Intelligence
                            https://www.truthinit.com/index.php/channel/2139/the-human-experience-real-time-insights-into-page-intelligence/
                          • 10/28/2026
                            01:00 AM
                            10/28/2026
                            [APAC:] Secure AI Everywhere: Visibility, governance and protection for the agentic era
                            https://www.truthinit.com/index.php/channel/2125/apac-ensuring-comprehensive-security-for-ai-applications/
                          • 10/28/2026
                            06:00 AM
                            10/28/2026
                            [EMEA:] Secure AI Everywhere: Visibility, governance and protection for the agentic era
                            https://www.truthinit.com/index.php/channel/2127/emea-ensuring-ai-security-across-all-platforms/
                          • 10/28/2026
                            01:00 PM
                            10/28/2026
                            [AMERICAS:] Secure AI Everywhere: Visibility, governance and protection for the agentic era
                            https://www.truthinit.com/index.php/channel/2126/securing-ai-across-the-americas-strategies-and-insights/
                          • 10/28/2026
                            01:00 PM
                            10/28/2026
                            EnvZero: Near-Zero Time to Resolution--Live Agentic Remediation for Failed and Drifted Infrastructure
                            https://www.truthinit.com/index.php/channel/2179/envzero-near-zero-time-to-resolution-live-agentic-remediation-for-failed-and-drifted-infrastructure/
                          • 11/04/2026
                            11:00 AM
                            11/04/2026
                            Leveraging CISA’s Zero Trust Maturity Model in an AI-Driven Landscape
                            https://www.truthinit.com/index.php/channel/2149/leveraging-cisas-zero-trust-maturity-model-in-an-ai-driven-landscape/
                          • 11/04/2026
                            11:00 AM
                            11/04/2026
                            Aligning Agentic Intent: Understanding Your Agents' Purpose vs. Their Actions
                            https://www.truthinit.com/index.php/channel/2158/aligning-agentic-intent-understanding-your-agents-purpose-vs-their-actions/
                          • 11/05/2026
                            02:00 PM
                            11/05/2026
                            HUMAN Dialogue: Embracing the Rise of the Agentic Consumer in AI
                            https://www.truthinit.com/index.php/channel/2160/human-dialogue-embracing-the-rise-of-the-agentic-consumer-in-ai/
                          • 11/05/2026
                            02:00 PM
                            11/05/2026
                            Reclaim Your Evenings: Leverage Data Intelligence to Minimize Risk and Boost AI Adoption
                            https://www.truthinit.com/index.php/channel/2172/reclaim-your-evenings-leverage-data-intelligence-to-minimize-risk-and-boost-ai-adoption/
                          • 11/19/2026
                            01:00 PM
                            11/19/2026
                            360View: Govern, Secure & Recover Your Microsoft 365 Environment
                            https://www.truthinit.com/index.php/channel/2076/360view-govern-secure-recover-your-microsoft-365-environment/
                          Truth in IT
                          • Sponsor
                          • About Us
                          • Terms of Service
                          • Privacy Policy
                          • Contact Us
                          • Preference Management
                          Desktop version
                          Standard version