Microsoft Defender for Identity - protect your identity platform
Rating: 7 out of 10
IncentivizedUse Cases and Deployment Scope
Microsoft Defender for Identity is being used to complete the view of the threats in the XDR suite. We see often a broad scope of incidents and alerts, Microsoft Defender for Identity helps us to see the lateral movements and escalations to get a clear view of what is happening in the infrastructure after a possible breach
Pros
- detect threats and suspicious activities
- pro-active measurements on possible breaches
- identity security posture
Cons
- setup can be complicated, with AD complexity
- Sometimes the load on DCs is pretty high, leading to performance issues
- Better tuning options for preventing false-positive/bening alerts
Likelihood to Recommend
Microsoft Defender for Identity is a great solution for each company that has an Active Directory. It fills in the blanks for Identity related incidents that are being missed in the XDR platform. To get a full view on identity risks it is an essential component
Arjan Stijntjes
Security Consultant in Information Technology at Nedscaper (51-200 employees)
Vetted Review
3 years of experience