Petra Security

Petra Security is a security vendor focused on identity threat detection and response (ITDR) for Microsoft 365 environments, positioning its offering as "ITDR 2.0". Its product monitors identity and application activity in a tenant and surfaces account-takeover incidents through a per-user investigation view, presenting an "Attack Impact" summary that quantifies how long an attacker held access, how much of that delay was attributable to Microsoft audit-log publication lag, how quickly the detection fired after logs became available, and how quickly the session was contained.

The product's activity console organizes telemetry into views for logins, Exchange, SharePoint, Teams, authentication methods, devices, permissions, registered applications and URL clicks, and pairs it with user context such as user principal name, mailbox address, account creation date, job title, department, location and enrolled authentication methods. Individual events are enumerated with timestamps, the attacker action and target, and source IP metadata including ISP, hosting/proxy classification and geolocation. Event types shown include failed and successful sign-ins, pending MFA challenges, mailbox reads, updates and hard deletes of specific messages, sign-in and profile page access, and third-party mail client app registrations, over a selectable date range with refresh and export controls.