Master key concepts with interactive flashcards
What is Microsoft Defender for Identity (MDI) and what data source does it use?
Click to reveal answer
MDI is a cloud-based security solution that protects Active Directory environments. It uses a lightweight sensor installed on Domain Controllers that captures and analyzes network traffic (LDAP, Kerberos, NTLM, DNS, etc.) and Windows Event logs directly from the DC, without a network TAP.
Click to show question