Microsoft Defender for Identity being a Cloud service, continuous service updates are to be expected. We provide you with a summary of the changes and features that Microsoft has introduced during the month.
- Device detail pages now include device descriptions sourced from the Active Directory Description attribute.
- The following new alerts are available
Account Enumeration reconnaissance (LDAP) (external ID 2437)(Preview)
Directory Services Restore Mode Password Change (external ID 2438)(Preview)
The Advanced Settings page of Defender for Identity has now been renamed Adjust alert thresholds and offers a refreshed experience with increased flexibility to adjust alert thresholds. Microsoft has for example removed the Remove learning period option and added a Recommended test mode option to allow lowering the threshold level and increasing the number of alerts. The Sensitivity Level column is renamed Threshold level with new default values.
Versions 2.228, 2.229, and 2.230 bring improvements and bug fixes to the sensors.