Microsoft Defender for Identity

Microsoft Defender for Identity

A cloud-based identity threat-detection (ITDR) service that analyzes Active Directory traffic, looking for anomalous behaviors such as pass-the-hash, lateral movement, or domain dominance techniques. It surfaces alerts in Microsoft 365 Defender and integrates with SIEM tools.