GuardianIQ
avaldaja People Tech Group Inc
GuardianIQ enables compliant responses to safeguard employees and reduce insider threat risks.
The GuardianIQ Agent delivers proactive, intelligent security monitoring to protect intellectual property during employee offboarding by correlating identity, endpoint, and Microsoft 365 activity signals. It identifies risky behavior before departure, reduces insider threat risks, and enables timely, compliant response actions.
Integrated services: Defender, Entra, Sentinel, Microsoft Security Copilot
Agent tasks: Detection and validation of insider threats during offboarding, cross-source signal correlation, user activity analysis, anomaly detection in file and email behavior, risk scoring and classification, and remediation recommendation.
Agent workflow:
Input: UserId (email address of the user), LastWorkingDate, Data connectors: SigninLogs, AADNonInteractiveUserSignInLogs, AuditLogs, DeviceFileEvents, DeviceProcessEvents, DeviceLogonEvents, OfficeActivity
Output: Offboarding risk reports, identified suspicious activities, affected users and devices, risk levels (High/Medium/Low), summarized investigation insights, and recommended actions (such as contain, escalate, or monitor)