Topic

Hybrid Identity

Deployments in which an on-premises directory is synchronized with a cloud identity service, so accounts, groups and privileges exist on both sides and an attack on one can reach the other.

Current clusters

security1 publisher

Defender for Identity scores dormant AD accounts against a 90-day logon threshold

Microsoft's accounts posture assessment lists every Active Directory user account with no logon in the past 90 days and refreshes the score every 24 hours. Service accounts are excluded from that list.

Publishers:docs.microsoft.com

Reality

Evidence72
Adoption: Insufficient
Hype gap+12
Incentives62
Confidence66