Protecting identities with Azure AD Identity Protection
So, what is identity protection? Here is my definition – It is an automated identity risk detection service provided by Microsoft. But what does this mean?
If you think about it, there is a wealth of useful security information in Azure AD sign-in activities. By analyzing sign-in activities, we can uncover suspicious events that indicate that a user's identity has been compromised. For example, if we notice a sign-in event that deviates from a user's normal sign-in behavior, this could indicate that the user's identity is being used by someone other than the user.
The issue is that manual analysis to uncover these types of incidents involves a lot of administrative effort and may be practically impossible depending on the size of the environment. This is where identity protection comes in. It can help us to automate the detection of indicators of compromise and suspicious actions (for our user identities...