Detect Threats with Microsoft Defender for Identity | Microsoft 365 Defender

Learn how to employ Microsoft Defender for Identity to monitor your on-premises Active Directory and detect suspicious activities within your environment.

MDI is a cloud-based security solution that leverages your on-premises Active Directory signals to identify, detect, and investigate advanced threats, compromised identities, and malicious insider actions directed at your organisation. It integrates with Microsoft Defender for Cloud Apps and brings you as of today 11 built-in policies to discover weaknesses in your infrastructure. This information is pulled from sensors directly installed on your Domain Controller or on standalone servers and capture crucial events coming from AD, ADFS and Exchange Server. The signals are then correlated into a single console available from the Microsoft Defender for Cloud Apps portal.

Want more hands on advice to help you get the most out of Microsoft 365 Defender? Sign up for our no-cost, no-obligation, Microsoft 365 Defender Advisory Service to get a one-to-one consultation with our award-winning Microsoft Security experts.