How To Access Vulnerability And Compliance Data For MDI

Hi danjomartinz,

To retrieve vulnerability-specific data for Microsoft Defender for Identity (MDI), you can utilize the Microsoft Secure Score.
Microsoft Secure Score | Microsoft Learn
Here are the steps:

1. Navigate to the Microsoft Secure Score dashboard.
2. Choose the Recommended actions tab.
3. You can either search for a specific recommended action or apply filters, such as the Identity category.
4. For more detailed information, select the assessment.

These assessments offer insights into detections and contextual data regarding known exploitable components and misconfigurations, providing relevant paths for remediation.
They also enable active monitoring for on-premises identities and identity infrastructure.

Here is a list outlining the 16 most common AD vulnerabilities and misconfigurations.
www.infosecmatter.com

For a more comprehensive understanding of vulnerability management, the OWASP Vulnerability Management Guide can be valuable.
It provides practical information on pentesting Active Directory environments, listing common AD vulnerabilities and misconfigurations.
owasp.org