iVerify offers the ability for alerts to be sent via Webhooks to SIEM, SOAR, or other tooling.
iVerify would be a good datasource that can be correlated to ITDR user accounts. If a device is reported by an iVerify alert, and the identify is found to be using the same device (or at least device type), it can be used as a high fidelity signal that there may be now/soon an incident for that identify.
> The iVerify webhooks notify your application of insecure device scan events in real-time, enabling you to quickly take appropriate action.