Microsoft 365 Defender enriches the Microsoft Defender for Identity experience

This post has been republished via RSS; it originally appeared at: New blog articles in Microsoft Tech Community.

To all identity focused customers, we’re giving you further capabilities and recommend you begin using the Microsoft 365 Defender portal as your focal point for everything threat protection.

Microsoft Defender for Identity feeds into Microsoft 365 Defender, Microsoft’s end to end experience which correlates signals from Microsoft Defender for Endpoints, Microsoft Defender for Office and Microsoft Cloud App Security. It truly is your one stop shop for insights into advanced threats.


This integration introduces powerful advantages to your security toolkit. Microsoft Defender for Identity with Microsoft 365 Defender allows you to do:  

  • Advanced Hunting –  A  threat-hunting tool that allows you to leverage query-based analytics across large datasets.  You can bring together alerts and activities across all Microsoft 365 Defender products.
  • Incident Correlation – investigation is made easier by aggregating identity alerts, assets and investigation, evidence from your devices both in the cloud and on-premises  and Office 365 data locations to give you a single view to get a thorough insight into a possible attack.  
  • Custom Detections – allows you to get alerted on rule-based detections from advanced hunting queries, customizing your organization’s ability to respond to real threats being experienced in your industry.


Watch the video below to learn all about the new capabilities within Microsoft 365 for Defender that are available with your existing Microsoft Defender for Identity data.

REMEMBER: these articles are REPUBLISHED. Your best bet to get a reply is to follow the link at the top of the post to the ORIGINAL post! BUT you're more than welcome to start discussions here:

This site uses Akismet to reduce spam. Learn how your comment data is processed.