Identity Explorer (Preview)
Analysis / inference: Microsoft Defender for Identity has introduced the Identity Explorer tab in preview for Microsoft Sentinel Data Lake license holders, enabling interactive visualization of attack paths and exposure scenarios.
- Dates
- Source and collection dates not recorded
- Source
- Microsoft Defender for Identity - What's new · Limited verification
- Classification
- Microsoft Security
Section 01 · Summary analysis
The Identity page in Microsoft Defender for Identity has been updated with an Identity Explorer tab that leverages the hunting graph to map lateral movement, privilege escalation, and credential-access risks.
AI summary / analysis; claims are not independently verified. Check the primary source before acting.
Section 02 · Analysis
SecOps Signal analysisSOC analysts can now visualize and investigate complex identity attack paths and exposure scenarios directly within Microsoft Defender for Identity using interactive hunting graphs powered by the Microsoft Sentinel Data Lake.
Enhances threat hunting and identity posture visibility by offering pre-defined graphical scenarios for attack path analysis.
Section 03 · Recommended actions
- Review the documentation on investigating identities to leverage the new hunting graph features.
- Confirm Microsoft Sentinel Data Lake licensing status to ensure access to the preview capability.
- Verify if your organization holds a Microsoft Sentinel Data Lake license to enable the Identity Explorer tab.
- Review the Identity Explorer tab within the Identity page in Microsoft Defender for Identity to explore pre-configured exposure scenarios.