Microsoft continues to enhance its cloud Active Directory platform to provide customers with incentives to migrate their directories from on premise AD to the cloud. The latest service to be added to Azure AD is a new Identity Protection Service.
Azure AD Identity Protection is now available in preview. It uses advanced machine learning to look for anomalies, intrusion and compromised accounts to proactively detect cyber attacks.
At Microsoft, we enjoy a unique advantage here because we run many of the world’s largest cloud services, including Outlook.com, Xbox Live, Office 365 and Azure and they generate an incredible amount of data. And we put this data to good use! Every day our ML system processes>10 terabytes of data, including information on over 14B logins from nearly 1B users. These login signals are combined with data feeds from Microsoft’s Digital Crimes Unit and Microsoft Security Response Center, phishing attack data from Outlook.com and Exchange Online as well as information we acquire from partnering with law enforcement, academia, security researchers, and industry partners around the world.
Azure AD Identity Protection will notify admins of any detected attempts, risky sign-ins or configuration vulnerabilities.