Don't waste your money
Use Cases and Deployment Scope
Attivo IDEntitleX is used to run active directory scans and set up alerting mechanisms. Attivo IDEntitleX also helps us keep a track on the roles and permissions for the active directory account on a single pane of glass. The implementation of Attivo IDEntitleX helps maintain a better security posture for the organization
Pros
- Monitoring account activities
- Visibility into account roles and permissions
- Service account management
- Password rotation and tracking for Kerberos account
Cons
- Reduce the false positives
- The UI is very slow and resource intensive
- The support team needs more technical depth to rectify the issues
Most Important Features
- Monitoring changes to account roles and permissions
- Representing relationship for roles and objects using graphs
- Identify and isolate the risks
Return on Investment
- The false positive results are a downside
- Relatively less expensive identity monitoring tool
- Integrates well with other vendor tools
Other Software Used
Zscaler Internet Access, Attivo BOTsink, Splunk Enterprise Security (ES)