Show Notes
In the context of IAM, resource mining refers to theprocess of discovering, cataloging, and analyzing resources within an organization's environment to understand their structure, permissions, ownership, and access controls. The goal is often to gain visibility into the resources (e.g., applications, servers, databases, files, or cloud infrastructure), their associated identities and usage patterns , enabling effective governance, security, and compliance. Let's understand this tricks of the trade and how it is applicable to a cloud solution, zero trust strategy, an AD environment and an AD-Application-IGA ecosystem.
Email: [email protected] LinkedIn: https://www.linkedin.com/in/rohit-agnihotri
More from The Identity Navigator
The Badge That Printed Itself: A SharePoint TokenForgery, Decoded Word by Word One line from my morning threat intel digest: “CVE-2026-55040. Critical. CVSS 9.1. SharePoint on-prem authentication bypass, under active exploitation.” This episode stops and takes the whole sentence apart, from first principles, until it reads likeplain English. Then we walk the heist: how a stranger with no account and no password handed SharePoint a homemade admin token, and SharePoint said welcome back.
Three labs. Five breached companies. One testing vendor named Irregular.
Everyone is using AI. Almost nobody can prove what it’s doing. In this solo episode, we design a runtime AI governance platform from scratch on a whiteboard, and then meet PulseAI, the product IAM veteran Amit Masand built at IDMEXPRESS. With the numbers justifying the problem, an honest competitive map, who it’s not for, and a free AI-traffic risk assessment for listeners. Links PulseAI by IDMEXPRESS: idmexpress.ai Company site: idmexpress.com) Amit Masand on LinkedIn: linkedin.com/in/amit-m-67b4692 Contact: [email protected] Listener offer: mention this episode for a complimentary risk assessment of your AI traffic, no commitment.
Previously on The Identity Navigator (recommendedlistening before this episode): Episode 40: SCIM - The protocol that finally made provisioning grow up
0-40% of SaaS accounts in the mid-2000s belonged to people who'd already left the company. Ghost accounts, quietly sitting there — and that sadly hasn't changed much today. This episode: where SCIM came from, what it actually solves, and what it still doesn't. Core RFCs: RFC 7642 — SCIM: Definitions, Overview, Concepts, and Requirements RFC 7643 — SCIM: Core Schema RFC 7644 — SCIM: Protocol