Identity Threat Detection & Response - on-prem to cloud ITDR from Microsoft

Protect against identity-based attacks with Identity Threat Detection and Response capabilities. Ensure your organization is equipped to protect identities wherever they are-on-premises, in the cloud or hybrid. As an integral component of the XDR experience, identity alerts are contextualized within broader security incidents, enhancing your ability to manage threats effectively. The integrated Copilot experience and advanced hunting capabilities allow for in-depth investigation of alerts and activity logs. Security analysts and identity admins can collaborate seamlessly with bidirectional integration between Defender XDR and Microsoft Entra.
Daniel Lynch, Microsoft Defender for Identity’s Senior Product Manager, shares how Identity Threat Detection and Response can be utilized in daily operations and coordinated actions throughout every phase of an identity-related security incident, strengthening your organization's defense posture.
► QUICK LINKS:
00:00 - Stop identity-based attacks
01:13 - How to use Identity Threat Detection and Response
02:37 - See an active multi-stage incident
03:57 - Use Copilot for Security
05:08 - Advanced Hunting in Microsoft Defender XDR
05:38 - Block a compromised user account in Active Directory
06:44 - Improve security posture in Microsoft Defender XDR with Secure Score
08:04 - Wrap Up
► Link References:
For more information, check out aka.ms/ITDR
► Unfamiliar with Microsoft Mechanics?
As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft.
• Subscribe to our RUclips: / microsoftmechanicsseries
• Talk with other IT Pros, join us on the Microsoft Tech Community: techcommunity.microsoft.com/t...
• Watch or listen from anywhere, subscribe to our podcast: microsoftmechanics.libsyn.com...
► Keep getting this insider knowledge, join us on social:
• Follow us on Twitter: / msftmechanics
• Share knowledge on LinkedIn: / microsoft-mechanics
• Enjoy us on Instagram: / msftmechanics
• Loosen up with us on TikTok: / msftmechanics
#XDR #Cybersecurity #IdentitySecurity #MicrosoftEntra

[@matthouse99]

4:19 "If I drill into our user Jeff.."
If only it was that easy to figure out why users do what users do.

[@Enlidev]

MDI is a great tool, but the licensing mechanism makes it soo damn expensive it's deterring.

[@breakingcustombc2925]

Be interesting to see if this could replace ITDR from Crowdstrike. One thing I like about CS is I can do MFA for on-premise stuff that doesn't have native MFA capabilities.

[@SeiferAlmasy21]

Microsoft Global Secure Access, Private Access. Your Welcome!

[@axis0401]

On-PremiseS