Deceptive defense: best practices for identity based honeytokens in Microsoft Defender for Identity
Honeytokens are a great tool for defenders to augment their security posture with traps hidden within their digital environments. Learn some best practices for the tactics, locations and types of Honeytokens to use with Microsoft Defender for Identity.
ZeroLogon is now detected by Microsoft Defender for Identity (CVE-2020-1472 exploitation)
We know that all of you have been intrigued about the recently patched CVE-2020-1472 Netlogon Elevation of Privilege Vulnerability, widely known as ZeroLogon. While we strongly recommend that you deploy the latest security updates to your servers and devices, we also want to provide you with the best detection coverage possible for your domain controllers. Microsoft Defender for Identity (previously Azure Advanced Threat Protection) along with other Microsoft 365 Defender (previously Microsoft Threat Protection) solutions detect adversaries as they try to exploit this vulnerability against your domain controllers.Monthly news - May 2024
Microsoft Defender XDR Monthly news May 2024 Edition This is our monthly "What's new" blog post, summarizing product updates and various new assets we released over the past month across our Defender products. In this edition, we are looking at all the goodness from April 2024.Securing AD CS: Microsoft Defender for Identity's Sensor Unveiled
In this article, we will embark on a technical deep dive into the latest offering from Microsoft Defender for Identity (MDI), focusing on Active Directory Certificate Services (AD CS). Learn how this new development improves security and provides strong protection for your organization, in this important threat landscape.Monthly news - November 2023
Microsoft 365 Defender Monthly news November 2023 Edition This is our monthly "What's new" blog post, summarizing product updates and various new assets we released over the past month across our Defender products. In this edition, we are looking at all the goodness from October 2023.Introducing the new PowerShell Module for Microsoft Defender for Identity
Today, I am excited to introduce a new PowerShell module designed to help further simplify the deployment and configuration of Microsoft Defender for Identity. This tool will make it easier than ever to protect your organization from identity-based cyber-threats.Protect and Detect: Microsoft Defender for Identity Expands to Entra Connect Server
We are excited to announce a new Microsoft Defender for Identity sensor for Entra Connect servers. This addition is a significant step in our ongoing commitment to expanding Defender for Identity’s coverage across hybrid identity environments. It reinforces our vision of overseeing and protecting the entire identity fabric, greatly enhancing the SOC’s visibility and protections for these complex environments.
