Forum Discussion

HeikeRitter's avatar
HeikeRitter
Icon for Microsoft rankMicrosoft
Mar 30, 2023

Ninja Cat Giveaway: Episode 10 | Identity Threat Detection and Response

For this episode, your opportunity to win a plush ninja cat is the following – Our season finishes here! After learning about this last topic, tell us your thoughts on the Microsoft 365 Defender ap...
Incident Management
investigation
learning
Response Actions
siem
  • MSTechie's avatar
    MSTechie
    Apr 03, 2023
    My favourite quote of the session was "securing identities is a team sport", I love how Microsoft is encouraging organisations to ensure the identity team and SOC team work together as one to protect their environments better and protect identities where ever the are and providing protection across different identity providers.
Douglas_Young's avatar
Douglas_Young
Copper Contributor
Mar 30, 2023

HeikeRitter I Really like the ITDR. Its nice to have a place to look at all the logins, the risk score, and why they scored high. If you do spot a true positive risk for a user you need to be able to quickly disable their AD account and you can do it within a few clicks, it really makes the ITDR portal of great value. Thanks for the great info!

Resources