Identity Directories Have Become An Unmonitored Intelligence Source
Identity directory egress is the blind spot sitting inside almost every enterprise security program: the moment a valid session reads more than it should, and nothing notices, because reading was never the thing anyone built alarms for. This week, a threat actor operating under the alias “TheHatman” began selling internal employee directories pulled from at…