Microsoft 365 Defender enriches the Microsoft Defender for Identity experience
Published Oct 22 2020 09:54 AM 6,006 Views

To all identity focused customers, we’re giving you further capabilities and recommend you begin using the Microsoft 365 Defender portal as your focal point for everything threat protection.

Microsoft Defender for Identity feeds into Microsoft 365 Defender, Microsoft’s end to end experience which correlates signals from Microsoft Defender for Endpoints, Microsoft Defender for Office and Microsoft Cloud App Security. It truly is your one stop shop for insights into advanced threats.


This integration introduces powerful advantages to your security toolkit. Microsoft Defender for Identity with Microsoft 365 Defender allows you to do:  

  • Advanced Hunting –  A  threat-hunting tool that allows you to leverage query-based analytics across large datasets.  You can bring together alerts and activities across all Microsoft 365 Defender products.
  • Incident Correlation – investigation is made easier by aggregating identity alerts, assets and investigation, evidence from your devices both in the cloud and on-premises  and Office 365 data locations to give you a single view to get a thorough insight into a possible attack.  
  • Custom Detections – allows you to get alerted on rule-based detections from advanced hunting queries, customizing your organization’s ability to respond to real threats being experienced in your industry.


Watch the video below to learn all about the new capabilities within Microsoft 365 for Defender that are available with your existing Microsoft Defender for Identity data.

Version history
Last update:
‎May 11 2021 02:01 PM
Updated by: