An alert shows an identity exploring sensitive security groups in abnormal ways on the city's hybrid directory. Which Defender product detects that kind of anomalous identity behavior?
Select an answer to reveal the explanation.
Short Explanation
When an account starts prowling sensitive groups like a raccoon in the records room, that is an identity anomaly. Defender for Identity is tuned for those directory behaviors. OneNote, webinar forms, and Designer tips are not identity detectors.
Full Explanation
Abnormal exploration of sensitive groups is an identity-behavior detection scenario associated with Microsoft Defender for Identity. OneNote organization, Teams webinar registration, and PowerPoint Designer are productivity features, not identity threat analytics. Mapping anomalous identity activity to Defender for Identity is the fundamentals association.