Microsoft Defender for IdentityMicrosoft Defender for Identity monitors Active Directory, alerts on suspicious behavior, analyzes user behavior, and detects malicious activities. Organizations secure identities by managing endpoint detection and integrating with cloud services, benefiting from real-time analytics, threat intelligence, and automation. Improved integration with on-prem applications and enhanced threat intelligence alignment are needed.
Defender for Identity is a little more expensive than other Microsoft products. Identity and Microsoft Defender for Cloud are both a bit costly.
It is very affordable considering that other SIEM solutions are much more expensive and have many more licensing restrictions and fees.