Identity Insights

Red Canary’s Identity Insights use AI analysis of your identity telemetry to build a build a behavioral baseline for each account in your environment. By understanding the typical behavior and activity patterns associated with a user, you can quickly spot anomalies when they occur.

You can get an Identity Insight report on demand for any email address for which data exists, even if that identity doesn't currently have a record in Red Canary.

How to View Identity Insights

1. From your Red Canary homepage, go to the Identities page.

2. In the search bar, enter the email address for the identity you want to view.

3. Click the Explore identities with button associated with the email.
   

4. If the system has relevant data for the email address you entered, you’ll see a summary of the user’s activity along with key behavioral insights.
   
   You can also use the Logon Insights tab to drill down and examine underlying telemetry in the following categories:

   • Geolocation

   • VPN &TOR

   • Browser

   • Time

   • IP Address