---
title: "Discussion on \"ITDR Explained: Detecting Attackers Who Sign In With Valid Credentials\" | Hashnode"
description: "Discussion on \"ITDR Explained: Detecting Attackers Who Sign In With Valid Credentials\". An attacker who holds a system administrator's password does not need to break through any wall; they simply sign in. To the firewall, the EDR agent and even the identity management system, an authori"
url: "https://hashnode.com/posts/itdr-explained-detecting-attackers-who-sign-in-with-valid-credentials/6af15026b2cd53ac96620640"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [ITDR Explained: Detecting Attackers Who Sign In With Valid Credentials](https://securityland.hashnode.dev/itdr-explained-detecting-attackers-who-sign-in-with-valid-credentials?utm_source=hashnode&utm_medium=feed)

An attacker who holds a system administrator's password does not need to break through any wall; they simply sign in. To the firewall, the EDR agent and even the identity management system, an authori

2d ago · 2 min read · securityland.hashnode.dev  
Read the article

-   [#cybersecurity](https://hashnode.com/tag/cybersecurity)
-   [#identity-security](https://hashnode.com/tag/identity-security)
-   [#security-operations](https://hashnode.com/tag/security-operations)

## Written by

[Kazem Mortazavi](https://hashnode.com/@kazem-mortazavi)

@kazem-mortazavi · Tehran, Iran

  
[View profile](https://hashnode.com/@kazem-mortazavi)

Founder @ Security Land · Cybersecurity & IT Strategy Consultant · Threat analysis, network security & data protection

Founder of Security Land and CEO of PRS, with 25+ years in ICT. I write practical, no-hype analysis of the latest vulnerabilities, zero-days and incidents — and what security and infrastructure teams should actually do next. Focus areas: network security, DLP, encryption/HSM, identity and threat intelligence. More at symantecland.com

## Responses

Markdown supported · ⌘↵ to post

No responses yet.