Integrate Microsoft Defender for Identity with Red Canary
- 28 Mar 2024
- 1 Minute to read
- PDF
Integrate Microsoft Defender for Identity with Red Canary
- Updated on 28 Mar 2024
- 1 Minute to read
- PDF
Article summary
Did you find this summary helpful?
Thank you for your feedback
Red Canary can integrate with Microsoft Defender for Identity. This integration provides visibility into the identity dimension of a confirmed threat and enables you to respond to threats quickly and comprehensively. Red Canary uses a single integration with the Microsoft Graph API to collect alerts from both workloads.
To configure Microsoft Defender for Identity, you need to integrate Microsoft Graph v2 with Red Canary. Click here for instructions to set up Microsoft Graph v2.
Note: Configuration of the MDE environment is handled by the customer, not Red Canary.
How are these capabilities activated in Microsoft?
Defender for Identity
Defender for Identity is a standalone sensor which is deployed on your self-managed Active Directory Domain Controllers. To get started, see Microsoft’s Prerequisites and Installation instructions.
Entra ID Identity Protection
If you have the appropriate license, get started by configuring risk policies in your Azure portal.
Was this article helpful?
