Microsoft Defender for Identity.
Well, this is another member of the Microsoft Defender Cloud suite.
The previous name, at least the most recent previous name,
was Azure Advanced Threat Protection, or ATP.
And the way I want you to think about MDI as it's called,
is that this is a cloud‑based security solution that you can light up to
monitor your local Active Directory infrastructure,
and then again, taking advantage of the Microsoft AI backend,
the intelligence security graph, the ISG,
the service can report on user and entity behavior throughout your domain,
can protect your Active Directory credentials,
passwords, group membership changes, and most importantly,
because it's always running in the background and always
examining access and traffic in your domain,
it can proactively identify, alert,
and initiate investigations of that anomalous behavior.
I think this is such a great value because I'm old enough in the
industry to remember when we domain administrators largely had to
handle the security monitoring manually,
and as human beings, we have to sleep a certain portion of every 24‑hour period,
a service like MDI never sleeps. Alright, time for a demo.