CrowdStrike Falcon Platform
Identity Protection
Identity Protection defends user accounts and the systems that manage them. It watches Active Directory and Entra ID for attacks that misuse credentials.
What it is
Identity Protection is the part of the Falcon platform that guards identities. It covers both Active Directory and Entra ID. It looks for attacks that steal or abuse credentials, then helps stop them before they spread.
Key capabilities
- Detection of credential theft in real time
- Detection of lateral movement across accounts
- Enforcement of conditional access and MFA
- Help securing privileged access
Who it’s for
It suits teams that need to protect logins and account activity. It fits hybrid setups that span on-premises Active Directory and Entra ID. Security teams use it to catch identity attacks as they happen.