Identity-based attacks have become the primary way attackers move laterally in a network. They are also responsible for half of the initial intrusions. Addressing these attacks requires very different tooling and approaches compared to malware-based attacks.