NCEBusiness

Microsoft Defender for Identity

Identify, detect, and investigate advanced threats within your identity infrastructure with threat intelligence.

Vendor:: Microsoft
SKU:: cfq7ttc0lh0d:0001:Commercial

BusinessEnterprise

MicrosoftBusinessEnterpriseAnnual Prepaid1-Year CommitmentGlobalMin. 1 licenses

Microsoft Defender for Identity provides advanced threat protection by monitoring and analyzing user, entity, and resource behaviors. It focuses on safeguarding your hybrid identity infrastructure from sophisticated cyberattacks targeting Active Directory, a critical component in most enterprise networks. The solution is tailored for security teams who require in-depth insights into identity-based attacks and wish to enhance their ability to detect, investigate, and respond to advanced persistent threats and compromised identities. By integrating with Microsoft Defender XDR, it can provide a unified view of attacks across identities, endpoints, cloud apps, and email. Typical use cases include detecting suspicious service account attacks, privilege escalation, lateral movement, and reconnaissance on network resources. Defender for Identity uses behavioral analytics and machine learning to establish a baseline for normal behaviors and alerts on deviations, reducing false positives and accelerating investigations through prioritized alerts and a visual attack timeline.

What's included

Identifieringssensorer för lokal Active Directory

Molnbaserad analytik

Beteendeanalys och maskininlärning

Anomalidetektering

Identifiering av avancerade ihållande hot (APT)

Avslöjande av laterala förflyttningsvägar

Enkel distribution med minimal påverkan

Integration med Microsoft Defender XDR

Prioriterade varningar med tydliga tidslinjer

Undersökning av användar- och enhetsbeteende efter kompromettering

Identifiering av ovanliga nätverksåtkomstmönster

Rapportering och granskningsfunktioner

Möjlighet till automatiserade åtgärder via Defender XDR

Skydd mot credential theft-attacker

Övervakning av användarrelationer och gruppmedlemskap

Frequently asked questions

What is Microsoft Defender for Identity?

Microsoft Defender for Identity is a cloud-based security solution that protects your hybrid identity infrastructure, especially Active Directory, from advanced cyberattacks by monitoring and analyzing user and entity behaviors.

What types of threats can Microsoft Defender for Identity detect?

It can detect a variety of advanced threats, including suspicious service account attacks, privilege escalation, lateral movement paths, reconnaissance on network resources, and credential theft attacks.

How does integration with Microsoft Defender XDR work?

Defender for Identity integrates with Microsoft Defender XDR to provide a unified attack view across identities, endpoints, cloud apps, and email, enabling coordinated investigations and responses.

Is Microsoft Defender for Identity difficult to implement?

No, the solution is designed for easy deployment with minimal impact on your existing infrastructure, thanks to sensors placed on your domain controllers.

Secure handling & support Request a quote

Prices are indicative. Final price will be quoted based on contract term and scope. Contact us for a current quote.

Choose a plan

Request a quote

Prices are indicative. Final price will be quoted based on contract term and scope. Contact us for a current quote.

Enter the number of licenses you're interested in and submit your request — we'll get back to you with a tailored quote.

Number of licenses

Billing Type: Annual Prepaid (1-Year Commitment)

Frequently asked questions

What is Microsoft Defender for Identity?: Microsoft Defender for Identity is a cloud-based security solution that protects your hybrid identity infrastructure, especially Active Directory, from advanced cyberattacks by monitoring and analyzing user and entity behaviors.
What types of threats can Microsoft Defender for Identity detect?: It can detect a variety of advanced threats, including suspicious service account attacks, privilege escalation, lateral movement paths, reconnaissance on network resources, and credential theft attacks.
How does integration with Microsoft Defender XDR work?: Defender for Identity integrates with Microsoft Defender XDR to provide a unified attack view across identities, endpoints, cloud apps, and email, enabling coordinated investigations and responses.
Is Microsoft Defender for Identity difficult to implement?: No, the solution is designed for easy deployment with minimal impact on your existing infrastructure, thanks to sensors placed on your domain controllers.

Microsoft Defender for Identity

What's included

Frequently asked questions

Choose a plan

Frequently asked questions

Related products

Microsoft Defender for Cloud Apps

Microsoft Defender for Endpoint Server

Microsoft Defender for Office 365 (Plan 2)