Commvault Expands End-to-End Identity Resilience: Detect, Log, and Reverse Hard-to-Detect Threats in Active Directory
Commvault (NASDAQ: CVLT) expanded its end-to-end Identity Resilience portfolio to detect hard-to-find threats in Active Directory, log and audit identity changes, and rapidly roll back malicious or unwanted modifications to a trusted state.
The company also announced integration of its Active Directory forest recovery with Cleanroom Recovery, enabling isolated AD forest restores and recovery-plan testing without disrupting production. These advancements debut at SHIFT 2025 with early access beginning in early 2026.
Commvault (NASDAQ: CVLT) ha ampliato il suo portafoglio end-to-end Identity Resilience per rilevare minacce difficili da individuare in Active Directory, registrare e auditare i cambiamenti di identità e riportare rapidamente a uno stato affidabile modifiche dannose o indesiderate.
L'azienda ha anche annunciato l'integrazione del suo Active Directory forest recovery con Cleanroom Recovery, consentendo ripristini isolati della foresta AD e test di piani di recupero senza interrompere la produzione. Questi avanzamenti fanno il loro debutto a SHIFT 2025 con accesso anticipato a partire dall'inizio del 2026.
Commvault (NASDAQ: CVLT) amplió su portfolio end-to-end de Identity Resilience para detectar amenazas difíciles de localizar en Active Directory, registrar y auditar cambios de identidad, y revertir rápidamente modificaciones maliciosas o no deseadas a un estado de confianza.
La empresa también anunció la integración de su recuperación de bosque de Active Directory con Cleanroom Recovery, posibilitando restauraciones aisladas de bosques de AD y pruebas de planes de recuperación sin interrumpir la producción. Estos avances se presentan en SHIFT 2025 con acceso anticipado a principios de 2026.
Commvault (NASDAQ: CVLT)은 엔드 투 엔드 Identity Resilience 포트폴리오를 확장하여 Active Directory에서 찾기 어려운 위협을 탐지하고, 아이덴티티 변경을 로깅 및 감사하며, 악의적이거나 원치 않는 수정 사항을 신뢰할 수 있는 상태로 신속하게 되돌립니다.
또한 회사는 Active Directory 포리스트 복구와 Cleanroom Recovery의 통합을 발표하여 독립적으로 AD 포리스트를 복원하고 생산에 영향을 주지 않으면서 복구 계획 테스트를 가능하게 합니다. 이 혁신은 SHIFT 2025에서 처음 공개되며 초기 액세스는 2026년 초부터 시작됩니다.
Commvault (NASDAQ : CVLT) a élargi son portefeuille de bout en bout Identity Resilience pour détecter les menaces difficiles à repérer dans Active Directory, enregistrer et auditer les modifications d'identité, et ramener rapidement les modifications malveillantes ou indésirables à un état fiable.
L'entreprise a également annoncé l'intégration de son récupération de forêt Active Directory avec Cleanroom Recovery, permettant des restaurations de forêts AD isolées et des tests de plans de récupération sans perturber la production. Ces avancées seront présentées lors de SHIFT 2025 avec un accès anticipé à partir du début de 2026.
Commvault (NASDAQ: CVLT) hat sein End-to-End Identity Resilience-Portfolio erweitert, um schwer zu findende Bedrohungen in Active Directory zu erkennen, Identitätsänderungen zu protokollieren und zu auditieren sowie bösartige oder unerwünschte Änderungen schnell in einen vertrauenswürdigen Zustand zurückzusetzen.
Das Unternehmen kündigte außerdem die Integration seiner Active Directory Forest Recovery mit dem Cleanroom Recovery an, wodurch isolierte AD-Forst-Wiederherstellungen und Tests von Wiederherstellungsplänen ohne Beeinträchtigung der Produktion ermöglicht werden. Diese Entwicklungen werden auf SHIFT 2025 vorgestellt und beginnen mit dem Early Access Anfang 2026.
Commvault (NASDAQ: CVLT) وسّعت محفظة Identity Resilience الشاملة لديها لاكتشاف التهديدات التي يصعب العثور عليها في Active Directory، وتسجيل ومراجعة تغييرات الهوية، واستعادة سريعة للتغييرات الخبيثة أو غير المرغوبة إلى حالة موثوقة.
كما أعلنت الشركة عن دمج استرداد غابة Active Directory مع Cleanroom Recovery، مما يتيح استعادة غابات AD المعزولة واختبار خطط الاسترداد دون تعطيل الإنتاج. ستظهر هذه التطورات لأول مرة في SHIFT 2025 مع إتاحة مبكرة اعتباراً من أوائل 2026.
- Detect, log, and rollback integrated for Active Directory threats
- AD forest recovery integrates with Cleanroom Recovery for isolated restores
- Recovery-plan testing without production disruption
- Early access availability beginning in early 2026
- Limited availability initially as early access only beginning early 2026
Insights
Commvault extends Active Directory protection with detection, audit trails, and real-time rollback, plus isolated forest recovery testing.
Commvault links vulnerability assessment, identity-change logging, and anomaly detection to surface hard-to-detect threats in Active Directory. Teams can see who changed what, when, and where, then reverse suspicious modifications directly from the change log without hunting for recovery objects.
Integrating AD forest recovery with Cleanroom Recovery allows recovery in an isolated environment and lets teams test plans without touching production identity systems. Key dependencies include deployment coverage across AD estates and the quality of detection rules; incomplete coverage or noisy signals could limit effectiveness.
Watch for early access availability in
The offering unifies identity change control with backup recovery, reducing friction during AD compromise and recovery exercises.
The product combines change logging, vulnerability assessments, and rollback from an audit trail into a single workflow. This reduces manual forensics and accelerates return to a trusted state by removing the need to locate discrete recovery points.
The Cleanroom integration adds an isolated testing capability, which raises readiness by enabling non-disruptive rehearsals of forest recovery. Effectiveness depends on test scope and fidelity; expect meaningful evidence only after end-to-end drills and measurable recovery-time metrics.
Concrete items to monitor: early access feedback in
Also announces integration between Commvault's Active Directory forest recovery offering and Cleanroom Recovery, taking readiness to a new level
The company also announced advancements to its Active Directory forest recovery offering that helps teams test recovery plans in good times, so they are ready for the bad times.
AD is one of the hottest threat vectors for bad actors to exploit. Nine out of ten attacks1 target AD because it controls access to data, systems, and applications – without it, business operations can grind to a halt. Bad actors often launch attacks that fly under the radar – like stealing credentials, exploiting broad permissions, and accessing sensitive data and systems.
Introduced as part of the Commvault Cloud Unity platform release, Commvault's latest identity resilience advancements help enterprises rapidly address these challenges from every angle.
- Detect weaknesses and threats: Uses integrated vulnerability assessment, identity change, and anomaly detection to track risks across users, groups, and policies in AD.
- Log and audit the changes: IT and security teams can see who made what changes, when, and from where – and maintain an audit trail that logs all important change events.
- Reverse unwanted changes in real time: From the change log itself, teams can identify suspicious modifications and quickly roll them back – without needing to locate recovery points or objects manually.
"Active Directory serves as the core of our business operations and if compromised, key business functions could be impacted," said Erich Beter, Senior Director, Information Security, Jazwares. "Commvault's innovation with Identity Resilience will allow us to detect and roll back malicious identity changes as they happen so that we can maintain reliable authentication and access control while strengthening our overall cyber resilience."
"When identity systems are compromised, the consequences can be severe. Unauthorized access to user accounts and sensitive information are known to be key causes leading to data breaches, financial loss, and unauthorized activity," said Fernando Montenegro, VP of Cybersecurity & Resilience at The Futurum Group. "Commvault's capabilities that help enterprises spot hard-to-detect threats in Active Directory and roll back safely to a trusted state can play an important role in addressing identity-based attacks."
AD Forest Recovery
+ Cleanroom Recovery
Commvault is also integrating its AD forest recovery offering with Cleanroom Recovery.
By integrating these technologies, customers can now recover AD forests in an isolated cleanroom and test their recovery plans in advance, without disrupting their identity systems in production.
"Commvault's end-to-end Identity Resilience portfolio provides game-changing protection and recovery to customers. And, with Commvault, we go much further," said Rajiv Kottomtharayil, Chief Product Officer, Commvault. "We unify identity resilience with data protection and data security on one platform. That means a lower overall TCO for customers and a single, reliable recovery plan for their entire enterprise, not just one workload."
Availability
These Identity Resilience advancements will be introduced at SHIFT 2025 and available in early access beginning in early 2026. To learn more, watch this short demo.
Learn More at SHIFT 2025
This announcement complements other significant announcements at SHIFT 2025, including the company's Commvault Cloud Unity platform release and other distinctive innovations that are changing the game in cloud native data protection and cyber recovery.
To get a first-hand look at all of these announcements, please join Commvault at SHIFT 2025 virtually on November 19 (register here).
About Commvault
Commvault (NASDAQ: CVLT) is a leader in unified resilience at enterprise scale. In a constantly evolving threat landscape, Commvault keeps customers ready by unifying data security, identity resilience, and cyber recovery, on one cloud-native, AI-enabled platform. Customers trust Commvault to conduct the fastest, most complete recoveries – not just their data, but their entire business. Purpose-built for the agentic enterprise, Commvault also enables organizations to safely embrace AI while protecting against AI-driven threats.
1 Sheridan, K. (2021, May 3). Researchers Explore Active Directory Attack Vectors. Dark Reading. https://www.darkreading.com/vulnerabilities-threats/researchers-explore-active-directory-attack-vectors
View original content to download multimedia:https://www.prnewswire.com/news-releases/commvault-expands-end-to-end-identity-resilience-detect-log-and-reverse-hard-to-detect-threats-in-active-directory-302612261.html
SOURCE COMMVAULT
FAQ
What new Active Directory protections did Commvault (CVLT) announce on November 12, 2025?
When will Commvault (CVLT) Identity Resilience features be available for early access?
How does Commvault (CVLT) combine AD forest recovery with Cleanroom Recovery?
Will Commvault (CVLT) let teams roll back AD changes directly from logs?
Does Commvault (CVLT) offer recovery-plan testing that avoids production impact?
Where and when were Commvault's (CVLT) Identity Resilience announcements presented?
