Microsoft Defender for Identity (MDI) raises alerts for classic Active Directory (AD) attacks. You do not need to know how to perform them, but you must recognize them, understand what the attacker gained, and know the correct response. These alerts matter because they usually mean the attacker is already inside and working toward control of the whole domain, so they deserve high priority in the queue.
Free account
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 6 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.