Monitors identity infrastructure to detect credential abuse, privilege escalation, and lateral movement across authentication boundaries in real.