Huntress launches Identity Posture Assessment report in Managed ISPM to score Microsoft 365 tenant identity defenses
Huntress announced the Identity Posture Assessment, an on-demand report in Huntress Managed ISPM that scores a Microsoft 365 tenant against the Huntress Identity Security Framework. This is a product announcement, not a security incident. Huntress cites its own data: 79% of critical and high-severity SOC incident reports last year were tied to identity threats, more than half of recommended controls are missing in over 60% of tenants, and 35% of ITDR incidents over six months could have been prevented by fully deployed ISPM policies. The report can be co-branded and is aimed at MSPs for prospecting and at internal security teams for leadership reporting.
Technical Details
- The report gives a compliance rating with four buckets: Compliant, Not Compliant (Huntress can deploy the fix), Manual Action, and Risk Accepted. It scores only controls the tenant is licensed for.
- Controls are grouped into three capabilities mapped to Managed ITDR: Unwanted access (MFA, legacy auth, guest access, admin protection, email security), Shadow workflows (Exchange, Teams, SharePoint settings attackers use to evade controls) and Rogue apps (OAuth consent and app creation).
- Microsoft Secure Score is shown separately from the Huntress rating.
- Non-compliant controls are listed with severity, category and capability, split into one-click deployable fixes and manual configuration.
- Reports are generated from the ISPM dashboard at account or organization level and download as a PDF. Only Microsoft 365 is supported.
- The article names the common identity weaknesses as missing MFA policies, legacy protocols left enabled and over-privileged admin accounts.
Remediation
- Enforce MFA, disable legacy authentication, and restrict admin privileges to what is needed.
- Limit OAuth consent and app creation to prevent unapproved or overprivileged apps.
- Review Exchange, Teams and SharePoint settings for configurations that let attackers bypass controls or hide activity.
- Monitor for configuration drift so posture does not degrade.
Linha do tempo
-
Huntress launches Identity Posture Assessment report in Managed ISPM to score Microsoft 365 tenant identity defenses
ler a análise desta fonte ocultar
Huntress announced the Identity Posture Assessment, an on-demand report in Huntress Managed ISPM that scores a Microsoft 365 tenant against the Huntress Identity Security Framework. This is a product announcement, not a security incident. Huntress cites its own data: 79% of critical and high-severity SOC incident reports last year were tied to identity threats, more than half of recommended controls are missing in over 60% of tenants, and 35% of ITDR incidents over six months could have been prevented by fully deployed ISPM policies. The report can be co-branded and is aimed at MSPs for prospecting and at internal security teams for leadership reporting.
Technical Details
- The report gives a compliance rating with four buckets: Compliant, Not Compliant (Huntress can deploy the fix), Manual Action, and Risk Accepted. It scores only controls the tenant is licensed for.
- Controls are grouped into three capabilities mapped to Managed ITDR: Unwanted access (MFA, legacy auth, guest access, admin protection, email security), Shadow workflows (Exchange, Teams, SharePoint settings attackers use to evade controls) and Rogue apps (OAuth consent and app creation).
- Microsoft Secure Score is shown separately from the Huntress rating.
- Non-compliant controls are listed with severity, category and capability, split into one-click deployable fixes and manual configuration.
- Reports are generated from the ISPM dashboard at account or organization level and download as a PDF. Only Microsoft 365 is supported.
- The article names the common identity weaknesses as missing MFA policies, legacy protocols left enabled and over-privileged admin accounts.
Remediation
- Enforce MFA, disable legacy authentication, and restrict admin privileges to what is needed.
- Limit OAuth consent and app creation to prevent unapproved or overprivileged apps.
- Review Exchange, Teams and SharePoint settings for configurations that let attackers bypass controls or hide activity.
- Monitor for configuration drift so posture does not degrade.