Netwrix Threat Manager

Real-time threat detection and response for security teams protecting Active Directory, Entra ID and file systems against identity attacks, ransomware and insider threats.

netwrix.com

Suggest a correction

Overview

Netwrix Threat Manager detects and responds to threats in Active Directory, Entra ID and file systems. It builds behavior baselines for users and service accounts to flag anomalies, correlates events into attack chains for investigation, uses honeytokens to expose attackers, and can block risky Tier 0 changes or trigger automated response actions to contain malicious activity. Console access can use any RADIUS-capable one-time password solution.
More product details

Product

Demo Url
netwrix.com/en/demo
Documentation
docs.netwrix.com/docs/threatmanager/3_3
Solution Kind
Application
Version
3.3

Features

Anomaly/Malware Detection

Detects ransomware activity from mass file changes and abnormal encryption patterns

Flags anomalous user and service account behavior

Categories: Identity Threat Detection and Response

Threat Response

Blocks risky Tier 0 changes in real time

Triggers automated response actions to contain malicious activity

Categories: Cybersecurity

Monitoring

Real-time threat detection across AD, Entra ID and file systems

Categories: Cybersecurity

Workflow details

Evidence
  • Name
    Attack chain analysis
    Description
    Connects individual events into complete attack narratives for faster investigations

Reviews

User experiences, moderated before publication. Review policy

Write a review

No reviews yet.

Be the first to share your experience with Netwrix Threat Manager.

Add a product

Search to find a product.

Privacy choices

Choose what to allow.

You can change your choice here at any time. Refusing optional analytics does not limit the catalog.

AdvertisingAdSense is not currently enabled. Advertising choices will be available through its consent platform before ads are activated.Not active

Cookie details · Privacy rights