New Service Account Discovery page
Analysis / inference: Microsoft Defender for Identity introduces a dedicated Service Account Discovery page for centralized Active Directory service account tracking and investigation.
- Dates
- Source and collection dates not recorded
- Source
- Microsoft Defender for Identity - What's new archive · Limited verification
- Classification
- Microsoft Security
Section 01 · Summary analysis
Defender for Identity added automatic identification and inventory features for Group Managed Service Accounts (gMSA), Managed Service Accounts (MSA), and user accounts acting as services, alongside a dedicated details and timeline view.
AI summary / analysis; claims are not independently verified. Check the primary source before acting.
Section 02 · Analysis
SecOps Signal analysisSOC analysts and identity engineers gain centralized visibility into service accounts and group managed service accounts to track potential credential exposure.
Enhances identity posture management by consolidating service account telemetry, unique connections, and related security alerts into a single view.
Section 03 · Recommended actions
- Navigate to Microsoft Defender for Identity to explore the new Service Account Discovery dashboard.
- Review identified service accounts for correct criticality tagging and unexpected sign-in patterns.
- Review the new Service Account Discovery page in Microsoft Defender for Identity to inventory identified accounts.
- Examine account attributes, authentication types, and sign-in timelines for anomalous activity.