Microsoft Defender for Identity vs. RescueTime

Microsoft Defender for Identity is a great solution for each company that has an Active Directory. It fills in the blanks for Identity related incidents that are being missed in the XDR platform. To get a full view on identity risks it is an essential component

To understand where you are wasting too much time, and what you have to cut out in order to stop losing attention to what really matters in a day's work. It's a good app to categorize your day-to-day work and report your productivity level, and also how focused you are on what really matters from 9 to 5.

Incentivized

• detect threats and suspicious activities
• pro-active measurements on possible breaches
• identity security posture

• Understand how I'm spending work time.
• Maps everything that I do.
• Easy to deploy and use.

Incentivized

• setup can be complicated, with AD complexity
• Sometimes the load on DCs is pretty high, leading to performance issues
• Better tuning options for preventing false-positive/bening alerts

• User experience could improve.
• Price.
• Need to edit/categorize some activities manually.

Incentivized

Microsoft Defender for Identity is more specialized on the Identity platform, it is a single solution compared to a multi-solution. The integration is better when using the XDR suite in combination with Sentinel. Microsoft Defender for Identity gives a better overview of the security posture

• Cost impact was pretty high
• Learning curve, needed time (money) for training
• Greatly improved detections and gives more insights

• Prioritize the most important jobs.
• To set a limited time for less important work.

Incentivized