Discussions

Good afternoon, fellow ATLISers~

Veracross has rolled out an offer for Identity Exposure Monitoring on the dark web with Recorded Future. I wondered if anyone has used or looked into it from an evaluation standpoint. I am pretty intrigued from a cybersecurity perspective, but I would love to hear if anyone else has any experience with it.

Here is the offering in a nutshell: 

SYSTEM MONITORS DARK WEB
The dark web is continuously monitored for exposed credentials stolen by malware or data breaches.
EMAIL ALERT SENT
An email alert is issued every time an exposed credential from a member of your school community is found on the dark web.
VIEW DASHBOARD
Review your dashboard to see the details of all active credentials that have been exposed and assess the risk of each case.
TAKE ACTION
Choose the appropriate action for each case, such as removing malware from an impacted machine, resetting credentials, or deactivating an account.
GENERATE REPORTS
Run standard and custom queries to identify trends that help prevent future exposures.

Hi Amanda,

We have had the free trial with Veracross for a few weeks now, but it's hard to evaluate because compromised credentials will only show up if they have been found in the last 6 months I think (since we just started). So far, nothing new. We also SSO with Microsoft for employees and students, so we already utilize Microsoft's security tools. We do not use parent or coach email addresses for authentication, so again, it doesn't seem as relevant. We haven't totally opted out yet so if we get some data to test with, I'll return to this thread!

Good afternoon, fellow ATLISers~

Veracross has rolled out an offer for Identity Exposure Monitoring on the dark web with Recorded Future. I wondered if anyone has used or looked into it from an evaluation standpoint. I am pretty intrigued from a cybersecurity perspective, but I would love to hear if anyone else has any experience with it.

Here is the offering in a nutshell: 

SYSTEM MONITORS DARK WEB
The dark web is continuously monitored for exposed credentials stolen by malware or data breaches.
EMAIL ALERT SENT
An email alert is issued every time an exposed credential from a member of your school community is found on the dark web.
VIEW DASHBOARD
Review your dashboard to see the details of all active credentials that have been exposed and assess the risk of each case.
TAKE ACTION
Choose the appropriate action for each case, such as removing malware from an impacted machine, resetting credentials, or deactivating an account.
GENERATE REPORTS
Run standard and custom queries to identify trends that help prevent future exposures.

Good afternoon, fellow ATLISers~

Veracross has rolled out an offer for Identity Exposure Monitoring on the dark web with Recorded Future. I wondered if anyone has used or looked into it from an evaluation standpoint. I am pretty intrigued from a cybersecurity perspective, but I would love to hear if anyone else has any experience with it.

Here is the offering in a nutshell: 

SYSTEM MONITORS DARK WEB
The dark web is continuously monitored for exposed credentials stolen by malware or data breaches.
EMAIL ALERT SENT
An email alert is issued every time an exposed credential from a member of your school community is found on the dark web.
VIEW DASHBOARD
Review your dashboard to see the details of all active credentials that have been exposed and assess the risk of each case.
TAKE ACTION
Choose the appropriate action for each case, such as removing malware from an impacted machine, resetting credentials, or deactivating an account.
GENERATE REPORTS
Run standard and custom queries to identify trends that help prevent future exposures.

We evaluated it, and it caught an example. Looking at this from a purely cost/benefit perspective, our school decided to pay for the service. It is a matter of the cost of just one breach compared to the cost of the service. Yes, they should probably just add this as a free service, but a single breach is all it takes to destroy credibility, and once that's gone it can take generations to recover.

-Scott Hill

Systems Admin

The Evergreen School, Seattle

Good afternoon, fellow ATLISers~

Veracross has rolled out an offer for Identity Exposure Monitoring on the dark web with Recorded Future. I wondered if anyone has used or looked into it from an evaluation standpoint. I am pretty intrigued from a cybersecurity perspective, but I would love to hear if anyone else has any experience with it.

Here is the offering in a nutshell: 

SYSTEM MONITORS DARK WEB
The dark web is continuously monitored for exposed credentials stolen by malware or data breaches.
EMAIL ALERT SENT
An email alert is issued every time an exposed credential from a member of your school community is found on the dark web.
VIEW DASHBOARD
Review your dashboard to see the details of all active credentials that have been exposed and assess the risk of each case.
TAKE ACTION
Choose the appropriate action for each case, such as removing malware from an impacted machine, resetting credentials, or deactivating an account.
GENERATE REPORTS
Run standard and custom queries to identify trends that help prevent future exposures.

You are so right, Scott, just takes one breach. I'm curious if you read the monitoring system as just monitoring information associated with Veracross or for the school (systems) as a whole. Also, once you receive the information found on the dark web, do they offer mitigation services (advice) or are you taking on that step yourself? 

We evaluated it, and it caught an example. Looking at this from a purely cost/benefit perspective, our school decided to pay for the service. It is a matter of the cost of just one breach compared to the cost of the service. Yes, they should probably just add this as a free service, but a single breach is all it takes to destroy credibility, and once that's gone it can take generations to recover.

-Scott Hill

Systems Admin

The Evergreen School, Seattle

Good afternoon, fellow ATLISers~

Veracross has rolled out an offer for Identity Exposure Monitoring on the dark web with Recorded Future. I wondered if anyone has used or looked into it from an evaluation standpoint. I am pretty intrigued from a cybersecurity perspective, but I would love to hear if anyone else has any experience with it.

Here is the offering in a nutshell: 

SYSTEM MONITORS DARK WEB
The dark web is continuously monitored for exposed credentials stolen by malware or data breaches.
EMAIL ALERT SENT
An email alert is issued every time an exposed credential from a member of your school community is found on the dark web.
VIEW DASHBOARD
Review your dashboard to see the details of all active credentials that have been exposed and assess the risk of each case.
TAKE ACTION
Choose the appropriate action for each case, such as removing malware from an impacted machine, resetting credentials, or deactivating an account.
GENERATE REPORTS
Run standard and custom queries to identify trends that help prevent future exposures.

You are so right, Scott, just takes one breach. I'm curious if you read the monitoring system as just monitoring information associated with Veracross or for the school (systems) as a whole. Also, once you receive the information found on the dark web, do they offer mitigation services (advice) or are you taking on that step yourself? 

We evaluated it, and it caught an example. Looking at this from a purely cost/benefit perspective, our school decided to pay for the service. It is a matter of the cost of just one breach compared to the cost of the service. Yes, they should probably just add this as a free service, but a single breach is all it takes to destroy credibility, and once that's gone it can take generations to recover.

-Scott Hill

Systems Admin

The Evergreen School, Seattle

Good afternoon, fellow ATLISers~

Veracross has rolled out an offer for Identity Exposure Monitoring on the dark web with Recorded Future. I wondered if anyone has used or looked into it from an evaluation standpoint. I am pretty intrigued from a cybersecurity perspective, but I would love to hear if anyone else has any experience with it.

Here is the offering in a nutshell: 

SYSTEM MONITORS DARK WEB
The dark web is continuously monitored for exposed credentials stolen by malware or data breaches.
EMAIL ALERT SENT
An email alert is issued every time an exposed credential from a member of your school community is found on the dark web.
VIEW DASHBOARD
Review your dashboard to see the details of all active credentials that have been exposed and assess the risk of each case.
TAKE ACTION
Choose the appropriate action for each case, such as removing malware from an impacted machine, resetting credentials, or deactivating an account.
GENERATE REPORTS
Run standard and custom queries to identify trends that help prevent future exposures.