We use AD Connect to sync on-premises AD to Azure AD, and so far, it has been effective.
Microsoft Defender for Identity augments visibility into identity-based attacks with real-time detection of lateral movement and credential abuse. By automating tasks and integrating with Microsoft tools like Teams, it enhances security. Utilizing AI for threat protection, it improves security posture. However, enhancements in alert tuning, agent flexibility, internal IP handling, and technical support are needed for optimal deployment and reduced false positives, along with better automation of impossible travel detection to prevent IP misinterpretation.
