Event banner
Event details
Does it pick up on configuration changes that would reduce security posture? Such as incorrectly granting control over the domain controllers group to a low level user account?
Is there any sort of vulnerability assessment based on excessive or incorrect delegation of permissions
A: Yes, you can find all of Microsoft Defender for Identity security recommendations under Microsoft Secure Score (https://security.microsoft.com/securescore?viewid=actions), filtered to Defender for Identity.