Microsoft Defender for Identity

It is a cloud-based security solution that uses your on-premises Active Directory signals to identify, detect, and investigate advanced threats, compromised identities, and malicious insider actions directed at your organization.

Some of the benefits and advantages of using Microsoft Defender for Cloud Apps are:

• By analyzing user activities and information across your network, it identifies anomalies with adaptive built-in intelligence, giving you insights into suspicious activities and events.
• Defender for Identity provides invaluable insights on identity configurations and suggested security best practices.
• Through security reports and user profile analytics, it helps dramatically reduce your organizational attack surface, making it harder to compromise user credentials and advance an attack.
• It also offers Lateral Movement Paths that help you understand how an attacker can move laterally inside your organization to compromise sensitive accounts.

Overcast’s Microsoft Security specialists will help you to support security operations teams, protecting local identities and linking signals with Microsoft 365 through Microsoft Defender for Identity.

• Set up the Azure ATP portal
• Review the prerequisites for Azure ATP architecture and the requirements for Azure ATP sensors
• Configure the connection point proxy and internet connectivity options for Azure ATP Sensor.
• Enable Azure ATP to make remote calls to SAM
• Review Azure ATP status alerts and connect the Active Directory forest