MDI is expanding coverage to 10 new Identity posture recommendations (preview)
Analysis / inference: Microsoft Defender for Identity introduces ten new preview identity posture recommendations covering Active Directory and GPO misconfigurations within Microsoft Secure Score.
- Dates
- Source and collection dates not recorded
- Source
- Microsoft Defender for Identity - What's new archive · Limited verification
- Classification
- Microsoft Security
Section 01 · Summary analysis
Microsoft Defender for Identity added 10 new Identity Security Posture Management (ISPM) checks focusing on Active Directory infrastructure and Group Policy Objects, alongside an update to an existing Kerberos delegation recommendation.
AI summary / analysis; claims are not independently verified. Check the primary source before acting.
Section 02 · Analysis
SecOps Signal analysisSecurity posture assessments directly impact SOC visibility into Active Directory misconfigurations that adversaries abuse for lateral movement and privilege escalation.
SOC and identity teams gain visibility into specific directory misconfigurations such as unprivileged GPO modification rights and enabled built-in guest accounts.
Section 03 · Recommended actions
- Check Microsoft Secure Score for the newly introduced identity recommendations.
- Address identified Active Directory vulnerabilities like unsafe DnsAdmins permissions or reversible passwords in GPOs.
- Review Microsoft Secure Score for the 10 new Active Directory and Group Policy Object security posture recommendations.
- Verify whether any privileged accounts have sensitive configuration flags missing or feature reversible passwords in GPOs.