Contain compromised identities, compute blast radius, detect attacks, and trace lateral movement in real time