Forum Discussion

HeikeRitter's avatar
HeikeRitter
Icon for Microsoft rankMicrosoft
Mar 30, 2023

Ninja Cat Giveaway: Episode 10 | Identity Threat Detection and Response

For this episode, your opportunity to win a plush ninja cat is the following – Our season finishes here! After learning about this last topic, tell us your thoughts on the Microsoft 365 Defender ap...
Incident Management
investigation
learning
Response Actions
siem
  • MSTechie's avatar
    MSTechie
    Apr 03, 2023
    My favourite quote of the session was "securing identities is a team sport", I love how Microsoft is encouraging organisations to ensure the identity team and SOC team work together as one to protect their environments better and protect identities where ever the are and providing protection across different identity providers.
NinjaCatFan's avatar
NinjaCatFan
Copper Contributor
Apr 10, 2023

HeikeRitter thank you and the Defender Tech Community team for the past season of the Ninja Cat Show! It has been a thrill to watch it.

 

My thoughts on the Defenders ITDR-approach from an operator standpoint are how simple it is to first set up for the whole organization and gain valuable insight into the identity risk brought by either a rogue user or stolen credentials. ITDR enriches the identity data in an abnormal situation involving any sort of identity, no matter if it's an actual user, shared mailbox, service account or anything else in cloud, on-prem or external. Risk scores are also a very nice way to display how the user is regurarly acting and if there is some big variance all of a sudden.

Resources