Identity-based attacks accounted for 60% of all Talos IR cases, with Active Directory being the focal point in 44% of those incidents. Attackers bypassed multi-factor authentication (MFA) through push fatigue, misconfigured policies, or lack of full enrollment.
| Vendor | Product | Versions |
|---|---|---|
| cis | talos incident response | — |
