Microsoft Defender for Identity Description

Assist Security Operations teams in safeguarding on-premises identities and integrating signals with Microsoft 365 through Microsoft Defender for Identity. This solution aims to eradicate on-premises vulnerabilities, thwarting attacks before they can occur. Additionally, it allows Security Operations teams to optimize their time by focusing on the most significant threats. By prioritizing information, it ensures that Security Operations can concentrate on genuine threats rather than misleading signals. Gain cloud-driven insights and intelligence throughout every phase of the attack lifecycle with Microsoft Defender for Identity. It also aids Security Operations in identifying configuration weaknesses and offers guidance for remediation through Microsoft Defender for Identity. Integrated identity security posture management assessments provide visibility through Secure Score. Furthermore, the tool enables prioritization of the highest-risk users in your organization by utilizing a user investigation priority score, which is based on detected risky behaviors and historical incident occurrences. This integrated approach ultimately enhances overall security awareness and response strategies.

Microsoft Defender for Identity Alternatives
Securden Password Vault for Enterprises Reviews
Securden Password Vault for Enterprises
(63 Ratings)
Securden Password Vault is an enterprise-grade password management solution that allows you to securely store, organize, share, manage, and keep track of all human and machine identities. With a sleek access management system, Securden lets your IT teams share administrator credentials and effectively automate the management of privileged accounts in your organization. Securden seamlessly integrates with industry solutions like SIEM, SAML-based SSO, AD, and Azure AD among others to provide a smooth deployment in any organization. With Securden, organizations can rest easy as all their sensitive data is protected with strong encryption methods and supported by a robust high availability setup. Securden offers drilled-down granular access controls that allow users to grant access to accounts without revealing the underlying credentials in a just-in-time fashion. Securden Password Vault can be deployed both on-premise for self-hosting and on the cloud (SaaS).
Learn more
ManageEngine ADAudit Plus Reviews
ManageEngine ADAudit Plus
(619 Ratings)
ADAudit Plus enhances the security and compliance of your Windows Server environment by delivering comprehensive insights into all operational activities. It offers a detailed overview of modifications made to Active Directory (AD) resources, encompassing AD objects and their respective attributes, group policies, and more. By conducting thorough AD audits, organizations can identify and mitigate insider threats, misuse of privileges, and other signs of potential security breaches, thereby bolstering their overall security framework. The tool enables users to monitor intricate details within AD, including entities such as users, computers, groups, organizational units (OUs), group policy objects (GPOs), schemas, and sites, along with their associated attributes. Furthermore, it tracks user management activities like the creation, deletion, password resets, and alterations in permissions, providing insights into the actions taken, the responsible individuals, the timing, and the originating locations. Additionally, it allows organizations to monitor the addition or removal of users from security and distribution groups, ensuring that access privileges are kept to the necessary minimum, which is critical for maintaining a secure environment. This level of oversight is vital for proactive security management and compliance adherence.
Learn more
Permiso Reviews
Permiso
Permiso is a cloud identity security platform designed to secure every human, non-human, and AI identity across enterprise environments. At the core of the platform is the Universal Identity Graph, which continuously maps identities to credentials, machines, workloads, AI agents, permissions, and runtime activity. This allows security teams to maintain visibility across cloud infrastructure, SaaS applications, CI/CD systems, AI agents, and on-premises environments even when identities move across authentication boundaries. Permiso provides identity discovery, identity security posture management, runtime identity monitoring, threat detection, exposure analysis, and incident response from a single platform. The platform continuously evaluates identity usage patterns, entitlements, stale access, overprivileged accounts, inherited permissions, and runtime behavior to prioritize identities that present the greatest security risk. Its runtime attribution capabilities extend visibility beyond authentication events into agent executions, tool calls, MCP invocations, serverless functions, and machine identities. Permiso also detects lateral movement, credential compromise, anomalous behavior, insider threats, and identity-driven attacks using real-time runtime and control plane telemetry. Organizations can use the platform to secure human users, service accounts, vendors, workloads, APIs, non-human identities, and AI agents across complex enterprise environments. Permiso helps security teams reduce identity-related risk while improving detection, investigation, and response capabilities throughout the identity lifecycle.
Learn more
Falcon Identity Threat Detection Reviews
Falcon Identity Threat Detection
Falcon Identity Threat Detection provides a comprehensive view of all Service and Privileged accounts across both your network and cloud environments, offering detailed credential profiles and identifying weak authentication measures across every domain. It allows for a thorough analysis of your organization’s domains to uncover potential vulnerabilities linked to outdated credentials or weak password practices, while also revealing all service connections and insecure authentication protocols in use. This solution continuously monitors both on-premises and cloud-based domain controllers through API integration, capturing all authentication traffic in real time. By establishing a behavioral baseline for all entities, it can identify unusual lateral movements, Golden Ticket attacks, Mimikatz traffic patterns, and other related security threats. Additionally, it aids in recognizing escalation of privilege and suspicious Service Account activities. With the capability to view live authentication traffic, Falcon Identity Threat Detection significantly accelerates the detection process, making it easier to identify and address incidents as they arise, thus enhancing overall security posture. Ultimately, this proactive monitoring ensures that organizations remain vigilant against potential identity-related threats.
Learn more

Integrations

View Integrations

Reviews - 2 Verified Reviews

Total
ease
features
design
support
See More Reviews Write a Review

Company Details

Company:
Microsoft
Year Founded:
1975
Headquarters:
United States
Website:
www.microsoft.com/en-us/microsoft-365/security/identity-defender

Media

Microsoft Defender for Identity Screenshot 1
Microsoft Defender for Identity Screenshot 1 Microsoft Defender for Identity Screenshot 2 Microsoft Defender for Identity Screenshot 3
Recommended Products
PRTG Catches Network Issues Before They Cause Downtime Icon
PRTG Catches Network Issues Before They Cause Downtime

Threshold-based alerts flag problems early, so your team can act before users notice, not after.

Reactive troubleshooting usually means hearing about a problem from frustrated users, not your monitoring tool. PRTG sets threshold-based alerts across devices, servers and applications, notifying your team by email, SMS or push the moment a metric crosses a set limit. That means catching a failing disk or overloaded server before it becomes an outage and getting time back from firefighting. Start a free trial and set your first alerts today.
Download 30-Day Trial

Product Details

Platforms
Web-Based
On-Premises
Types of Training
Training Docs
Customer Support
Business Hours
Online Support

Microsoft Defender for Identity Features and Options

Microsoft Defender for Identity User Reviews

Write a Review
  • Name: Sandra C.
    Job Title: Director of Business Development
    Length of product use: 6-12 Months
    Used How Often?: Daily
    Role: User
    Organization Size: 26 - 99
    Features
    Design
    Ease
    Pricing
    Support
    Likelihood to Recommend to Others
    1 2 3 4 5 6 7 8 9 10

    Windows Defender is the leading default antivirus on the market

    Date: Mar 26 2021

    Summary: We could give an overall assessment by saying that it is the first antivirus that offers a complete and detailed service completely free and we can be confident that it does its job correctly by detecting and removing threats from the device. Although it does cause performance problems when in use.

    Positive: This security program that is in an analysis, constant monitoring of your computer. It has very complete elements such as analyzing automatically from the moment you start your PC to a detailed or specific scan to any file or document stored without the need to use internet connections.

    Negative: One of the main complaints that can be highlighted about this program is that it impairs the operation and performance of the device when this antimalware is doing a scan either routine or complete, it occurs when we want to access a program or perform simple tasks such as opening a folder or document.

    Read More...
  • Name: Ronald W.
    Job Title: Marketing Specialist
    Length of product use: 6-12 Months
    Used How Often?: Daily
    Role: User
    Organization Size: 100 - 499
    Features
    Design
    Ease
    Pricing
    Support
    Likelihood to Recommend to Others
    1 2 3 4 5 6 7 8 9 10

    Metamorphosis of Windows Defender over the years

    Date: Mar 22 2021

    Summary: Although in its beginnings there were extensive complaints about the operation and effectiveness of Windows Defender, to give a context that covers both points it could be said that the accuracy and confidence that generates the detection of threats is formidable, although it becomes a failure in the performance of the PC.

    Positive: Windows Defender has been one of the leading pre-installed malware services for a couple of years now. This is due to its effectiveness in detecting and eliminating threats inside your PC. By default the scanning option is active, which allows it to scan for threats in the background and in case it finds an unwanted item it sends you a notification.

    Negative: Sometimes, when the application is doing a complete analysis of all files, it affects the performance of the computer in certain aspects, such as when opening folders or accessing programs; it can even be a bit problematic to access Windows defender itself when it is performing a background scan.

    Read More...
  • Previous
  • You're on page 1
  • Next