TimeSeries Data

Defender for Identity is a cloud-based security solution that leverages On-Premises Active Directory signals to identify and detect threats. It monitors Domain Controllers by capturing it’s network traffic to leverage it with Windows event logs to analyze data for attacks, that might occur on a network. Once the sensor of Defender for Identity has been installed on all the Domain Controllers. We can use the data telemetry that it provides, to query for information.