Introducing Lightning Identity Runtime Protection: AI-Powered Detection of the Most Successful Identity Attack Patterns

Semperis argues AI-driven attacks are outpacing identity teams as machine identities outnumber human ones 10:1, and urges building organization-wide cyber resilience around hybrid identity protection before the next crisis.

Password spraying tests a few weak passwords across many accounts, dodging lockouts; Microsoft ties over a third of compromises to it. Covers delayed and Kerberos pre-auth variants plus detection.

Semperis DSP adds a Service Accounts Protection module that discovers and monitors risky service accounts, plus automated response rules and AD object lists to streamline hybrid AD administration.

Manually auditing every risky AD change is impractical; DSP's Auto Undo reverts unwanted modifications in real time, covering Modify, Add, Move, and Remove operations across critical objects.

With many GPOs across large AD environments, critical changes can slip under the radar. DSP simplifies GPO change auditing, alerts on suspicious edits, and helps restore altered policies.

Password spraying tries a few common passwords across many accounts to evade lockouts, targeting VPNs, Citrix gateways, and Entra ID tenants. Defenses include MFA and passwordless; DSP can detect it.