Live Workshop

How to Uncover Identity Obfuscation

Looking beyond proxied logins, laptop farms and fraudulent remote workers

  • DateTuesday, 17 November
  • Time11am ET / 4pm GMT / 5pm CET
  • FormatLive, 30 minutes
  • HostNick Roy, Silent Push
About the Workshop

Logins from a domestic IP can still come from somewhere else. Join Nick Roy for a 30-minute live session on using Traffic Origin and anonymization data to find the real country behind proxied logins, laptop farms and fraudulent remote workers.

Save Your Spot

Register for the live workshop.

Can't make it? Sign up anyway and we'll send you the recording.

What You'll See Live
  1. 01Splunk + Okta

    Okta Geo Delta Dashboard

    Catch logins whose origin does not match where they exited, including first-time anonymized logins.

  2. 02Microsoft Entra

    Conditional Access

    Turn bad ranges into named locations that block a sign-in or force step-up.

  3. 03Splunk

    Hiring Dashboard

    Correlate ATS, VPN, Okta and repo access to find US exit IPs with non-US origins.

  4. 04SOAR

    Automated Threat Check

    Run origin lookups on every alert, then branch from enrichment to step-up to suspension.

  5. 05Traffic Origin

    Scam Compound Search

    Pull a compound's IP footprint, hunt it in your logs and pivot to the next one.