Microsoft Defender for Identity

Named by 4 kept items in this workspace.

3 items name it under tools and 1 under affected products.

Search every workspace for Microsoft Defender for Identity. It matches the name as written, so it can find other things that share it.

The items that name it 4

From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths
writeupas tools2026-10-30
AD CS security posture assessments identify ESC1-related template exposure and insecure enrollment IIS endpoints tied to ESC8.
Fantastic clear-text passwords and where to collect them (Part 2 - Windows)
writeupas tools2026-06-28
Detects potential credential exposure in AD by analyzing free-text attributes (description, info, adminComment) for password formats/hints.
From Code to Coverage (Part 6): What netlogon.log Sees That Event 1644 Never Will
writeupas affected products2026-06-24It is written here as Microsoft Defender for Identity (MDI).
Sensor on domain controllers reads packets off the NIC; added detection external ID 2437 for LDAP Ping enumeration
AutoJack: How a single page can RCE the host running your AI agent | Microsoft Security Blog
writeupas tools2026-06-19
Detects and helps contain lateral movement and credential abuse pivoting into AD or Entra

All technologies in this workspace.