Microsoft Defender for Identity
New name for online service, licensed via User SLs, that detects and identifies suspicious user and device activity on an organization’s network indicative of cyber-attacks before serious damage can occur; see Azure Advanced Threat Protection (prior name) for in-depth entry.
Azure Advanced Threat Protection can be licensed stand-alone or through a licensing suite, but customers need to cover all users on the organization's network
An online service that detects and identifies suspicious user and device activity on an organization’s network indicative of cyber-attacks before serious damage can occur; licensed via User SLs.