Summary
As the security analyst for your organization, you wanted to find out how Microsoft Defender for Identity could help you to protect your environment from attackers. You've learned that you can use Microsoft Defender for Identity to detect and investigate different types of suspicious activity that indicates attempts to locate and compromise information from users, computers, and services running in your environment.
Now that you've completed this module, you should be able to:
- Understand threat detection in Microsoft Defender for Identity.
- Understand threat investigation in Microsoft Defender for Identity.
Learn more
- Tutorial: Reconnaissance alerts
- Tutorial: Compromised credential alerts
- Tutorial: Lateral movement alerts
- Tutorial: Domain dominance alerts
- Tutorial: Exfiltration alerts
- Tutorial: Investigate a user
- Tutorial: Investigate a computer
- Tutorial: Investigate lateral movement paths
- Tutorial: Investigate entities
- Interactive guide: Detect suspicious activities and potential attacks with Microsoft Defender for Identity