SecOps SignalSecurity Intelligence Workspace
Collection Degraded30 / 46 Sources HealthyPublic Intel Only
Source: Microsoft Defender for Identity - What's new · Limited verificationCanonical source
RECENTProduct updateAction required

Defender for Identity sensor updates

Analysis / inference: Microsoft released Defender for Identity sensor update version 2.255.19295.47272 introducing support for a new ETW provider.

Dates
Source and collection dates not recorded
Source
Microsoft Defender for Identity - What's new · Limited verification
Classification
Microsoft Security

Section 01 · Summary analysis

Sensor version 2.255.19295.47272 has been released with support for a new Event Tracing for Windows (ETW) provider alongside general quality improvements.

AI summary / analysis; claims are not independently verified. Check the primary source before acting.

Section 02 · Analysis

SecOps Signal analysis
Why it matters

Sensor version 2.255 introduces a new Event Tracing for Windows (ETW) provider, which enhances telemetry collection capabilities directly on domain controllers for security monitoring and threat detection.

Operational impact

Deploying the sensor update enables the new ETW provider capability, improving visibility into domain controller activity.

Section 03 · Recommended actions

  • Update Microsoft Defender for Identity sensors to version 2.255.19295.47272 through the Microsoft 365 Defender portal.
What to check
  • Verify current Defender for Identity sensor versions deployed across all domain controllers.
  • Check deployment status for sensor version 2.255.19295.47272.

Affected scope

ProductsDefender for Identity

Section 04 · References

1 public source