Microsoft Defender for Identity
Help protect your identity security landscape.
Manage identity risks
Use Microsoft Defender for Identity to help security operations teams protect on-premises identities and correlate signals with Microsoft 365.
Help protect on-premises identities with cloud intelligence
Get cloud-powered insights and intelligence in each stage of the attack life cycle with Microsoft Defender for Identity.

Help prevent attacks
Help security operations teams identify configuration vulnerabilities and get recommendations for resolving them with Microsoft Defender for Identity. Identity security posture assessments are displayed in Microsoft Secure Score for increased visibility.

Detect suspicious activities
Use real-time analytics and data intelligence with Microsoft Defender for Identity to prioritize and surface real threats. Frequent updates are delivered directly from the cloud to help you detect incidents as soon as possible.

Investigate risky behavior
Prioritize the riskiest users in your organization with a user investigation priority score based on observed behavior and number of prior incidents.

Hunt for threats
Help ensure efficient remediation by using Microsoft Defender for Identity data in advanced hunting queries. Correlate this data across email, endpoints, and apps to look for threats across your organization using Microsoft 365 Defender.