You're reading from Microsoft Defender for Identity in Depth An exhaustive guide to ITDR, breach prevention, and cyberattack response

Product type Paperback

Published in Dec 2024

Publisher Packt

ISBN-13 9781835884485

Length 380 pages

Edition 1st Edition

Concepts

Cybersecurity

Author (1):

Pierre Thoor

View More author details

Table of Contents (16) Chapters

Preface

1. Part 1:Mastering the Fundamentals of Microsoft Defender for Identity FREE CHAPTER

2. Chapter 1: Introduction to Microsoft Defender for Identity

3. Chapter 2: Setting up Microsoft Defender for Identity

4. Chapter 3: Leveraging MDI PowerShell for Automation and Management

5. Part 2: Advanced Configuration, Integration, and Threat Detection

6. Chapter 4: Integrating MDI with AD FS, AD CS, and Entra Connect

7. Chapter 5: Extending MDI Capabilities Through APIs

8. Chapter 6: Mastering KQL for Advanced Threat Detection in MDI

9. Part 3: Operational Excellence with Microsoft Defender for Identity

10. Chapter 7: Investigating and Responding to Security Alerts

11. Chapter 8: Utilizing MDI Action Accounts Effectively

12. Chapter 9: Building a Resilient Identity Threat Detection and Response Framework

13. Chapter 10: Navigating Challenges: MDI Troubleshooting and Optimization

14. Index

Why subscribe?

15. Other Books You May Enjoy

Real-world playbook – responding to advanced threats

In this section, we delve into a comprehensive playbook designed to guide security teams through the detection, validation, and response to advanced threats using MDI, Microsoft Sentinel, and other integrated security tools. This structured approach leverages automation, SOAR capabilities, and threat intelligence to manage complex security incidents effectively.

Defining advanced threats

“The pace of change is never going to be this slow again.”

This quote has rung true since I first heard it back in 2020 from an old colleague. In the fast-evolving landscape of hyperscalers, AI, and cybersecurity, advanced threats represent a significant challenge to organizations. Understanding these threats is essential to stay ahead of the curve to protect digital assets effectively.

Advanced threats in cybersecurity refer to sophisticated, often targeted attacks designed to infiltrate, disrupt, or exploit an organization...