You're reading from Microsoft Defender for Identity in Depth An exhaustive guide to ITDR, breach prevention, and cyberattack response

Product type Paperback

Published in Dec 2024

Publisher Packt

ISBN-13 9781835884485

Length 380 pages

Edition 1st Edition

Concepts

Cybersecurity

Author (1):

Pierre Thoor

View More author details

Table of Contents (16) Chapters

Preface

1. Part 1:Mastering the Fundamentals of Microsoft Defender for Identity FREE CHAPTER

2. Chapter 1: Introduction to Microsoft Defender for Identity

3. Chapter 2: Setting up Microsoft Defender for Identity

4. Chapter 3: Leveraging MDI PowerShell for Automation and Management

5. Part 2: Advanced Configuration, Integration, and Threat Detection

6. Chapter 4: Integrating MDI with AD FS, AD CS, and Entra Connect

7. Chapter 5: Extending MDI Capabilities Through APIs

8. Chapter 6: Mastering KQL for Advanced Threat Detection in MDI

9. Part 3: Operational Excellence with Microsoft Defender for Identity

10. Chapter 7: Investigating and Responding to Security Alerts

11. Chapter 8: Utilizing MDI Action Accounts Effectively

12. Chapter 9: Building a Resilient Identity Threat Detection and Response Framework

13. Chapter 10: Navigating Challenges: MDI Troubleshooting and Optimization

14. Index

Why subscribe?

15. Other Books You May Enjoy

Integrating MDI with Entra Connect

Bringing MDI together with Microsoft Entra Connect is all about stepping up your security game. It’s like having a vigilant guard dog that watches over both your on-premises and cloud identities. By linking these two, you get a full-picture view that’s crucial for spotting and stopping identity threats. This integration will help us in preventing, detecting, and responding to privilege escalation attacks and credential theft – commonly started against Entra Connect.

How Entra Connect works

Entra Connect (formerly known as Azure AD Connect/AAD Connect) is a tool from Microsoft to help bridge the gap between on-premises AD environments and Entra ID. Its primary role is to facilitate a seamless and secure synchronization of identity data, including users, groups, and other directory objects, between these two environments.

We will not go into depth about Entra Connect and how you can configure it with SSO, PHS, PTA, and...