New Ruxie AI power-up: Identity classification gives analysts a ‘gut check’ for identity alerts
ID: f1914a8d-a00a-5c52-8ad3-6c39597f1109
STIX ID: report--f1914a8d-a00a-5c52-8ad3-6c39597f1109
Feed Name: Expel Blog
Expel announces an AI-driven identity classification capability for its Ruxie automation engine that triages identity alerts from tools like Office 365, Okta, and Duo, prioritizes high-risk events (e.g., impersonation, unusual geolocations, MFA bypass), and auto-closes benign alerts with explanations to reduce analyst workload and speed response; the post cites increasing identity-based attacks, details safeguards (QA and restrictions on auto-closure), and notes available automations (e.g., disable accounts, reset credentials) now integrated into Expel Workbench.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
