Description

Azure Advanced Threat Protection (now Microsoft Defender for Identity) is a cloud-based insider and compromised threat identity management solution designed for SecOp analysts and security professionals. It enables users to identify, detect, and investigate advanced threats, compromised identities, and malicious insider actions; investigate suspicious user activities and advanced attacks throughout the kill chain; monitor organizational domain controllers; compromise user credentials using brute force attacks. Features include remediation management, user risk level calculation, multi-factor authentication, adaptive remediation, and workflow management.