project

Microsoft Defender for Identity

Microsoft's identity-focused security service, which reads Active Directory and Entra ID signals to detect attacks and to score directory configuration against a set of posture recommendations.

Known aliases

Defender for Identity

Relationships

No evidence-backed relationships are recorded.

Current clusters

security1 publisher

Defender for Identity scores dormant AD accounts against a 90-day logon threshold

Microsoft's accounts posture assessment lists every Active Directory user account with no logon in the past 90 days and refreshes the score every 24 hours. Service accounts are excluded from that list.

Publishers:docs.microsoft.com

Reality

Evidence72
Adoption: Insufficient
Hype gap+12
Incentives62
Confidence66