Rubrik Links Microsoft Defender to Automated Identity Recovery at RSAC 2026

Overview

• The integration channels Microsoft Defender identity threat alerts into Rubrik’s automated investigation, rollback, and recovery workflows to accelerate response.
• Joint customers can reverse malicious identity changes without full domain restores, using immutable recovery points to return to a known‑good state.
• Coverage spans hybrid identity systems, including Active Directory and Entra ID, with visibility into identity changes across environments.
• Rubrik cites Zero Labs research indicating 90% of IT and security leaders consider identity‑driven attacks their top risk.
• RBRK shares gained about 4.87% after the reveal, though the stock is down roughly 40% over six months as firms such as CIBC and Wedbush trimmed targets but kept positive ratings.