Microsoft Defender for Identity Updates

New security posture assessment:

Expansion of identity scoping - support for Organizational units (preview)

Microsoft Defender for Identity sensor version updates

Defender for Identity Unified Sensor (v3.x) is now generally available

Unlock additional security value in the unified agent (Preview)

New API support for unified agent

Updates to multiple detections to reduce noise and improve alert accuracy

Unified connectors is now available for Okta Single Sign-On connectors (Preview)

Identity scoping is now generally available (GA)*

New security posture assessment: Remove discoverable passwords in Active Directory account attributes

Includes bug fixes and stability improvements

Sensor version 2.246

Suspected Brute Force attack (Kerberos, NTLM)

Identity scoping is now available in Governance environments

New security posture assessments for unmonitored identity servers

Service account classification rules now available

Fixed audit verification checks for non-English operating systems

Expanded New Sensor Deployment Support for Domain Controllers (Preview)

Local administrators collection (using SAM-R queries) feature will be disabled

Privileged Identity Tag Now Visible in Defender for Identity Inventory

New Defender for Identity and PAM Integration

New Service Account Discovery page

Enhanced Identity Inventory (Preview)

New LDAP query events added to the IdentityQueryEvents table in Advanced Hunting

Defender ForIdentity PowerShell module updates (version 1.0.0.3)

New attack paths tab on the Identity profile page

added the new Prevent Certificate Enrollment with arbitrary Application Policies (ESC15)

MDI is expanding coverage with new 10 Identity posture recommendations

New Microsoft Entra Connect sensor