Avanpost has released version 1.4 of its SmartPAM privileged access management solution. The update introduces a library of 60 signatures mapped to the MITRE ATT&CK framework, designed to detect and respond to threats within privileged sessions.
The new signature library covers various attack tactics, including credential access, persistence, lateral movement, and evasion. Specific capabilities include identifying the disabling of OS audit services, antivirus software, or firewalls, as well as detecting system log clearing and command masking.
The system uses a signature analysis engine to process and normalize session events. Depending on the configuration, it can trigger automated responses such as blocking a user or command, terminating a session, or sending notifications to a SIEM system.
Customers can access the library via a subscription model, which will be updated regularly. Avanpost has announced that the subscription will be provided free of charge until the end of 2026.
