Forum Discussion
Dave8465
Jan 23, 2021Copper Contributor
What is the difference between MCAS and MDI while both provides suspicious activity details?
Hello, Microsoft Documentation provides following definitions for MDI and MCAS: MDI: The Defender for Identity portal provides a quick view of all suspicious activities in chronological order...
AnuragSrivastava
Jan 26, 2021Iron Contributor
Dave8465 MDI is applicable only to your On-Prem Domain Controllers where you can detect and get alerted on the suspicious activities (Account Enumeration, Lateral Movement, Brute Force, Suspicious Addition to Sensitive Groups, etc.) with respect to Domain Controllers.
While MCAS on the other hand is used to protect and govern data present across your cloud applications. MCAS detects unusual behavior across cloud apps to identify ransomware, compromised users or rogue applications, analyze high-risk usage and remediate automatically to limit the risk to your organization.