RECENTProduct updateAction required
Additional security value in the Defender for Identity sensor v3.x
Analysis / inference: Microsoft has introduced a new Unified sensor RPC audit tagging feature for Defender for Identity sensor v3.x.
- Dates
- Source and collection dates not recorded
- Source
- Microsoft Defender for Identity - What's new archive · Limited verification
- Classification
- Microsoft Security
Section 01 · Summary analysis
A new Unified sensor RPC audit tag option has been introduced for Defender for Identity sensor v3.x via the Asset rule management page.
AI summary / analysis; claims are not independently verified. Check the primary source before acting.
Section 02 · Analysis
SecOps Signal analysisWhy it matters
Enabling unified sensor RPC audit tags helps improve visibility and coverage across Active Directory environments monitored by Microsoft Defender for Identity.
Operational impact
Requires administrators to review and configure asset rules to ensure enhanced protection mechanisms are active on sensors.
Section 03 · Recommended actions
- Navigate to the Asset rule management page
- Apply the Unified sensor RPC audit tag to your Defender for Identity sensor v3.x instances
What to check
- Verify the deployment status of Defender for Identity sensor v3.x
- Check the Asset rule management page for Unified sensor RPC audit tag availability
Affected scope
ProductsDefender for Identity