---
title: ITDR Cheat Sheet
description: A practical 3-page guide with quick wins, detection tips, and response steps to help security teams stop identity-based attacks fast.
image: https://hero.permiso.io/hubfs/ITDR%20Cheat%20Sheet%20-%20LinkedIn%20(1200x628)%20v2.png
---

** [![Permiso](https://hero.permiso.io/hubfs/Permiso%202023.03.30/images/logo-permiso-dark.svg) ](https://permiso.io/?hsLang=en) **

Menu

** [![Permiso](https://hero.permiso.io/hubfs/Permiso%202023.03.30/images/logo-permiso-light.svg) ](https://permiso.io/?hsLang=en) **

- [ Product ](https://permiso.io/product/?hsLang=en)
- [ About ](https://permiso.io/about/?hsLang=en)
- [ P0 Labs ](https://permiso.io/p0-labs/?hsLang=en)
- [ Resources ](https://permiso.io/product/?hsLang=en)
- [ Contact ](https://permiso.io/contact/?hsLang=en)

[ Sign in ](https://arbiter.permiso.io/)

- [** ](https://twitter.com/permisosecurity)
- [** ](https://www.linkedin.com/company/permiso-security/)

© Permiso Security 2022  |  [Privacy Policy](https://permiso.io/legal/privacy?hsLang=en)  |  [Terms](https://permiso.io/legal/terms?hsLang=en)

# ITDR Cheat Sheet

##### Stop Identity-Based Threats Before They Stop You

Identity threats now account for *90% of breaches*—yet most security tools don’t monitor the identity layer. Our **Identity Threat Detection & Response (ITDR) Cheat Sheet** gives you quick wins, key detections, and maturity steps your team can use immediately to strengthen defenses.

Inside this 3-page guide, you’ll learn:

- **Critical identity threats to watch for** (compromised admins, service account abuse, IdP attacks, and more)
- **Response actions for the first 5 minutes and 30 minutes** after detecting a threat
- **Common mistakes to avoid** that attackers count on
- **Quick implementation checklist** to level up your ITDR program in weeks, not months

Whether you’re just starting your ITDR journey or looking to optimize an existing program, this cheat sheet gives your team the clarity and next steps to move faster against identity-based attacks.

Get the ITDR Cheat Sheet now and start closing the identity visibility gap.

![Layer_1](https://hero.permiso.io/hs-fs/hubfs/Layer_1.png?width=317&height=390&name=Layer_1.png)

#### Get the Cheat Sheet

 

###### trusted by these cool companies

- ![logo-nutanix](https://hero.permiso.io/hubfs/Permiso%202023.03.30/images/logo-nutanix.svg)
- ![modern-health](https://hero.permiso.io/hubfs/Permiso%202023.03.30/images/logo-modern-health.svg)
- ![logo-coupa](https://hero.permiso.io/hubfs/Permiso%202023.03.30/images/logo-coupa.svg)
- ![logo-acv](https://hero.permiso.io/hubfs/Permiso%202023.03.30/images/logo-acv.svg)

Permiso has proven to be indispensable to the way we manage and secure identities across multiple environments

![Headshot-SebastianGoodwin](https://hero.permiso.io/hubfs/Headshot-SebastianGoodwin.png)

Sebastian Goodwin, Chief Trust Officer, Autodesk

Permiso's ability to track identities and their activities across IaaS, SaaS and identity providers at runtime is unlike any of our existing solutions

![Michael H](https://hero.permiso.io/hubfs/Michael%20H.png)

Michael Hensley, Head of Cyber Security at Modern Health

Identity is the silver bullet in the cloud. If you don't get it right, you're dead!

![Headshot-Default-Jason Chan-1](https://hero.permiso.io/hubfs/Headshot-Default-Jason%20Chan-1.png)

Jason Chan, Former VP of Information Security at Netflix

** [![Permiso](https://hero.permiso.io/hubfs/Permiso%202023.03.30/images/logo-permiso-light.svg) ](https://permiso.io/?hsLang=en) **

- [ Product ](https://permiso.io/product/?hsLang=en)
- [ About ](https://permiso.io/about/?hsLang=en)
- [ Join Our Team ](https://permiso.io/product/?hsLang=en)

- [ P0 Labs ](https://permiso.io/p0-labs/?hsLang=en)
- [ Cloud Incident Report ](https://permiso.io/p0-labs/services/cloud-incident-response/?hsLang=en)
- [ Resources ](https://permiso.io/p0-labs/?hsLang=en)

- [ Request a Demo ](https://permiso.io/?hsLang=en#get-in-touch)
- [ Contact us ](https://permiso.io/contact/?hsLang=en)
- [ Sign In ](https://arbiter.permiso.io/account/login)

- [** ](https://twitter.com/permisosecurity)
- [** ](https://www.linkedin.com/company/permiso-security/)

© Permiso Security 2023  |  [Privacy Policy](https://permiso.io/legal/privacy?hsLang=en)  |  [Terms](https://permiso.io/legal/terms?hsLang=en)