Microsoft Defender for Identity vs. One Identity Defender

Microsoft Defender for Identity is a great solution for each company that has an Active Directory. It fills in the blanks for Identity related incidents that are being missed in the XDR platform. To get a full view on identity risks it is an essential component

Frankly, it is suited both when someone is working from home or in office. There can be kids who would fiddle with the machine or in office, someone might do it knowingly or unknowingly. This added layer ensures that the user is a tad bit safer. The only problem is that, once you login, you don't get triggers for an entire day. I wish if they add a trigger after every hour or two. I know it would be annoying but at least my identity is secure.

• detect threats and suspicious activities
• pro-active measurements on possible breaches
• identity security posture

• Fast to connect
• Easy to use
• Doesn't slow down my computer

Incentivized

• setup can be complicated, with AD complexity
• Sometimes the load on DCs is pretty high, leading to performance issues
• Better tuning options for preventing false-positive/bening alerts

• Remove the need to enter Windows password
• Sensitive to interruptions in internet connectivity

Incentivized

Microsoft Defender for Identity is more specialized on the Identity platform, it is a single solution compared to a multi-solution. The integration is better when using the XDR suite in combination with Sentinel. Microsoft Defender for Identity gives a better overview of the security posture

Bomgar is much easier to set up & there is only one step when connecting while Defender takes a few steps.

Incentivized

• Cost impact was pretty high
• Learning curve, needed time (money) for training
• Greatly improved detections and gives more insights

• Defender allows me to connect to the clients environment
• Without Defender I would not be able to support my client

Incentivized