Microsoft Defender for Identity Ninja Training
Microsoft Defender for Identity identifies, detects, and investigates advanced threats, compromised identities, and malicious insider actions directed at your organization. Dig in to the features, detentions, and functions of Microsoft Defender for Identity.Updating best practices for Domain Controllers
Customers are on a journey and hybrid identity environments will be an important state for many customers for a long time. Domain Controllers still act as a pivotal piece of infrastructure for many organizations, and the identities that Active Directory holds are often the target for attackers.Introducing Investigation Priority built on User and Entity Behavior Analytics
Enterprise security operations (SecOps) often have limited resources and staff, and security analysts face evolving, more sophisticated attack methods. Many of the newest tools and vulnerabilities can often go undetected without the right tools. Today, Microsoft is expanding the preview of the Unified SecOps Experience which includes the new Investigation Priority.Deceptive defense: best practices for identity based honeytokens in Microsoft Defender for Identity
Honeytokens are a great tool for defenders to augment their security posture with traps hidden within their digital environments. Learn some best practices for the tactics, locations and types of Honeytokens to use with Microsoft Defender for Identity.Unified SecOps Investigation for Hybrid Environments
With 81 percent of security breaches caused by compromised user credentials, identity security is paramount for all organizations. Enterprise security operations (SecOps) analysts face an increasing volume and velocity of alerts and incidents across an ever-expanding surface area from on-premises to the cloud.
ZeroLogon is now detected by Microsoft Defender for Identity (CVE-2020-1472 exploitation)
We know that all of you have been intrigued about the recently patched CVE-2020-1472 Netlogon Elevation of Privilege Vulnerability, widely known as ZeroLogon. While we strongly recommend that you deploy the latest security updates to your servers and devices, we also want to provide you with the best detection coverage possible for your domain controllers. Microsoft Defender for Identity (previously Azure Advanced Threat Protection) along with other Microsoft 365 Defender (previously Microsoft Threat Protection) solutions detect adversaries as they try to exploit this vulnerability against your domain controllers.
