Microsoft Defender for Identity

Microsoft Defender for Identity (MDI) is Microsoft's ITDR (Identity Threat Detection and Response) solution for hybrid identity environments. Detects attacks like Pass-the-Hash, Golden Ticket, DCSync and lateral movement through Active Directory and Entra ID telemetry — a key building block against ransomware lateral movement.