Forum Discussion
Microsoft Defender for Identity standalone sensors
Hi Current scenario: we are forwarding domain control security logs to another server(windows machine) via the "https://learn.microsoft.com/en-us/defender-for-identity/configure-event-forwardin...
In your scenario yes and you refer to the below documentation
https://learn.microsoft.com/en-us/defender-for-identity/configure-port-mirroring
Side Note : Defender for Identity standalone sensors do not support the collection of Event Tracing for Windows (ETW) log entries that provide the data for multiple detections. For full coverage of your environment, we recommend deploying the Defender for Identity sensor.
https://learn.microsoft.com/en-us/defender-for-identity/configure-port-mirroring
Side Note : Defender for Identity standalone sensors do not support the collection of Event Tracing for Windows (ETW) log entries that provide the data for multiple detections. For full coverage of your environment, we recommend deploying the Defender for Identity sensor.