Summary
This chapter has been all about managing MDI and its components. We have covered topics such as implementing RBAC for MDI, how to manage alerts, sensitive, honeytoken, and health alerts—anything an MDI administrator needs. And by making it to the end of this chapter, you should have enough knowledge to successfully manage your MDI instance in full.
MDI is a very capable tool, and we will circle back to MDI in Chapter 19 about Kusto Query Language (KQL) queries later in the book, where we will present examples of how to leverage MDI in your advanced hunting queries.
In the next chapter, we will move on to look at securing email with Exchange Online Protection and Microsoft Defender for Office 365.
