Harnessing adaptive authentication with Microsoft ITDR

In this episode, Senior Product Manager Chris Ayres and Senior Product Marketing Manager Daniel Lynch take us through the latest advancements in on-premises MFA capabilities, spotlighting how Microsoft's ITDR product can apply policies to users that are identified as subject to compromise. Additionally, experience first-hand the integration of Microsoft Defender XDR and Microsoft Entra and how user risk signals can be used to enforce conditional access across both cloud and on-premises applications. With enhanced protection and response features, join us to understand why this topic is a cornerstone of future initiatives.
Find this episode and many more on our playlist: aka.ms/ninjashowplaylist

[@AlienWarTycoon]

Just a thought, if you want to invalidate all of the cached Kerberos tickets when you are reacting and disabling an account, you should build into defender for endpoint the ability to run klist Purge on every device that is running Windows.

[@AlienWarTycoon]

Maybe that last comment could be scoped to only if the compromised account has a ticket on the computer running defender for endpoint

[@AlienWarTycoon]

You should define acronyms more often.

[@HeikeRitter]

Good feedback!