RSA Advisor for Admin Threats
Analyzes ID Plus admin events to detect suspicious or compromised account activity.
- Category
- Security
- Registry category
- Cybersecurity & ITThreat Detection & Response
- Vendor
- RSA Security
- Location
- Not disclosed
- Reviews
- Not rated (0 reviews on the listing)
- Listed on
- Microsoft Marketplace
- Pricing
- Not stated
Each fact carries one Provenance score: the average of its Disclosure and Evidence scores, the same rule the page uses for the overall score. Click any score to see the math behind it.
Vendor Provenance
Who actually operates this agent.
Build Provenance
What the agent is built on.
Reach Provenance
How the agent is distributed and adopted.
Data Provenance
What the vendor discloses about data handling.
Compliance Provenance
What standards the vendor meets, and who verified them.
What the publisher says
The RSA Advisor for Admin
Threats conducts a comprehensive analysis of administrative activity within an
ID Plus tenant through administrator logs that are stored within the Sentinel
Show the rest of the publisher’s description (13 more lines)
Datalake. This agent is designed to identify and surface potentially suspicious
activity that could indicate the compromise of an administrator account and/or
a potential insider threat. Utilizing this advisor, security administrators and
analysts can save time, as it automates the process of searching through logs
and correlating events using natural language prompts, resulting in quicker and
more accurate conclusions.
Estimated SCU consumption per execution:
- Small environments: ~0.2 SCUs
(e.g., lower administrative activity and limited event volume ~100 Events )
- Medium environments: ~0.3 SCUs
(e.g., moderate administrative activity and event volume ~200 Events)
- Large environments: ~0.4 SCUs
(e.g., higher administrative activity and larger event volumes ~500 Events)
Preview
5 imagesLinked repositories
Unknown
Unknown means this listing does not publish a repository. It is not a statement that the code is closed.
Publisher resources
- Support (opens in a new tab)
- ID Plus for Microsoft info on RSA.com/RSA-Microsoft (opens in a new tab)
Sources
- Marketplace listingMicrosoft Marketplace (opens in a new tab)
- Legal linkPrivacy Policy (opens in a new tab)
- Company recordOutside company data, matched on rsa.com
Reading the score
Disclosure · how many sources corroborate it
Evidence · what kind of evidence backs it
The SettleTop steps above are possible but not automated yet, so today they sit open and a perfect 10 is out of reach. Open information like firmographics and reach has fewer steps to climb, so it sits a little higher for the same visible evidence.
Information shown here reflects the best available information at the time of assessment and may be incomplete, outdated, or subject to change. It should be independently verified before being relied upon for any decision. SettleTop is not liable for any errors, omissions, or decisions made in reliance on this information.
Have information about this agent?
Send it to us for consideration
Spot something missing, wrong, or out of date? Share what you know. Every note reaches our team. It does not change the passport by itself: we review it first.