Account Lifecycle Management

Defender for Identity scores dormant AD accounts against a 90-day logon threshold

Microsoft's accounts posture assessment lists every Active Directory user account with no logon in the past 90 days and refreshes the score every 24 hours. Service accounts are excluded from that list.