Sensitive accounts vs non-sensitive accounts

%3CLINGO-SUB%20id%3D%22lingo-sub-899534%22%20slang%3D%22en-US%22%3ESensitive%20accounts%20vs%20non-sensitive%20accounts%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-899534%22%20slang%3D%22en-US%22%3E%3CP%3EIn%20terms%20of%20the%20ATP%20Dashboard%2C%20what%20are%20the%20differences%20in%20a%20sensitive%20account%20and%20non-sensitive%20account%3F%20Why%20would%20I%20need%20to%20tag%20an%20account%20as%20sensitive%3F%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-900398%22%20slang%3D%22en-US%22%3ERe%3A%20Sensitive%20accounts%20vs%20non-sensitive%20accounts%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-900398%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F363955%22%20target%3D%22_blank%22%3E%40jbchris%3C%2FA%3E%26nbsp%3B%2C%20I%20think%20the%20answer%20is%20here%3A%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure-advanced-threat-protection%2Fsensitive-accounts%23tagging-sensitive-accounts%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure-advanced-threat-protection%2Fsensitive-accounts%23tagging-sensitive-accounts%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CEM%3E%22This%20is%20important%20because%20Some%20Azure%20ATP%20detections%2C%20such%20as%20sensitive%20group%20modification%20detection%20and%20lateral%20movement%20paths%2C%20rely%20on%20which%20groups%20and%20accounts%20are%20considered%20sensitive.%22%3C%2FEM%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-900455%22%20slang%3D%22en-US%22%3ERe%3A%20Sensitive%20accounts%20vs%20non-sensitive%20accounts%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-900455%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F106935%22%20target%3D%22_blank%22%3E%40Eli%20Ofek%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EYes%2C%20thank%20you.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20should%20have%20read%20the%20freaking%20manual%20-%20LOL%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Occasional Contributor

In terms of the ATP Dashboard, what are the differences in a sensitive account and non-sensitive account? Why would I need to tag an account as sensitive? 

 

 

2 Replies
Highlighted

@jbchris , I think the answer is here:

https://docs.microsoft.com/en-us/azure-advanced-threat-protection/sensitive-accounts#tagging-sensiti...

 

"This is important because Some Azure ATP detections, such as sensitive group modification detection and lateral movement paths, rely on which groups and accounts are considered sensitive."

Highlighted

@Eli Ofek 

Yes, thank you. 

 

I should have read the freaking manual - LOL